Threat Response (Coursera)

Threat Response (Coursera)

If you are an associate-level cybersecurity analyst who is working in security operation centers, this course will help you understand threat response.

Class Deals by MOOC List - Click here and see Coursera's Active Discounts, Deals, and Promo Codes.

By the end of the course, you will be able to:
• Explain the purpose of incident response planning
• Describe the typical incident response life cycle
• Describe the typical elements within an incident response policy
• Describe how incidents can be classified.
• Describe the different US-CERT incident categories (CAT 0 to CAT 6)
• Describe compliance regulations that contain incident response requirements
• Describe the different general CSIRT categories
• Describe the basic framework that defines a CSIRT
• Describe the different CSIRT incident handling services: triage, handling, feedback, and optional announcement
• Describe a typical incident response plan and the functions of a typical CSIRT.
To be successful in this course, you should have the following background:

  1. Skills and knowledge equivalent to those learned in Implementing and Administering Cisco Solutions (CCNA) v1.0 course
  2. Familiarity with Ethernet and TCP/IP networking
  3. Working knowledge of the Windows and Linux operating systems
  4. Familiarity with basics of networking security concepts.

Course 7 of 7 in the Cybersecurity Operations Fundamentals Specialization.

Syllabus

WEEK 1
Describing Incident Response
If you are an associate-level cybersecurity analyst who is working in security operation centers, this course will help you understand threat response. By the end of the course, you will be able to: • Explain the purpose of incident response planning • Describe the typical incident response life cycle • Describe the typical elements within an incident response policy • Describe how incidents can be classified. • Describe the different US-CERT incident categories (CAT 0 to CAT 6) • Describe compliance regulations that contain incident response requirements • Describe the different general CSIRT categories • Describe the basic framework that defines a CSIRT• Describe the different CSIRT incident handling services: triage, handling, feedback, and optional announcement • Describe a typical incident response plan and the functions of a typical CSIRT. To be successful in this course, you should have the following background: 1. Skills and knowledge equivalent to those learned in Implementing and Administering Cisco Solutions (CCNA) v1.0 course 2. Familiarity with Ethernet and TCP/IP networking 3. Working knowledge of the Windows and Linux operating systems 4. Familiarity with basics of networking security concepts.

WEEK 2
Understanding the Use of VERIS
If you are an associate-level cybersecurity analyst who is working in security operation centers, this course will help you describe the use of Vocabulary for Event Recording and Incident Sharing (VERIS). By the end of the course, you will be able to: • Explain the use of VERIS to document security incidents in a standard format. • Explain VERIS. • Explain the VERIS incidents structure. • Explain the VERIS 4 A's. • Describe a typical VERIS record. • Describe the VERIS community database. • Describe the Verizon Data Breach Investigations Report and the Cisco Annual Security Report. To be successful in this course, you should have the following background: 1. Skills and knowledge equivalent to those learned in Implementing and Administering Cisco Solutions (CCNA) v1.0 course 2. Familiarity with Ethernet and TCP/IP networking 3. Working knowledge of the Windows and Linux operating systems 4. Familiarity with basics of networking security concepts.

Go to Class
MOOC List is learner-supported. When you buy through links on our site, we may earn an affiliate commission.

Related Courses

Digital Shield: Cybersecurity for Data and System Protection (Coursera) Coursera
Universidad Anáhuac

Digital Shield: Cybersecurity for Data and System Protection (Coursera)

Digital Shield: Cybersecurity for Data and Systems Protection" is a course designed to provide a solid introduction to the protection of sensitive data and the infrastructure supporting various information systems. This MOOC was created in collaboration with CYBERPRO Global, a leading international provider of cyber education programs with over a decade of experience in training security personnel and delivering large-scale technological projects. Its aim is to educate participants on the fundamental concepts of information security and cybersecurity, including techniques and tactics necessary to protect information and computer systems from potential threats.

Nov 16th 2026
5-12 Weeks
Internet History, Technology, and Security (Coursera) Coursera
University of Michigan

Internet History, Technology, and Security (Coursera)

The impact of technology and networks on our lives, culture, and society continues to increase. The very fact that you can take this course from anywhere in the world requires a technological infrastructure that was designed, engineered, and built over the past sixty years. To function in an information-centric world, we need to understand the workings of network technology. This course will open up the Internet and show you how it was created, who created it and how it works. Along the way we will meet many of the innovators who developed the Internet and Web technologies that we use today.

Nov 16th 2026
5-12 Weeks
Trust and Security with Google Cloud (Coursera) Coursera
Google Cloud

Trust and Security with Google Cloud (Coursera)

As organizations move their data and applications to the cloud, they must address new security challenges. The Trust and Security with Google Cloud course explores the basics of cloud security, the value of Google Cloud's multilayered approach to infrastructure security, and how Google earns and maintains customer trust in the cloud.

Nov 16th 2026
5-12 Weeks
Ethical Issues in Data Science (Coursera) Coursera
University of Colorado Boulder

Ethical Issues in Data Science (Coursera)

Computing applications involving large amounts of data – the domain of data science – impact the lives of most people in the U.S. and the world. These impacts include recommendations made to us by internet-based systems, information that is available about us online, techniques that are used for security and surveillance, data that is used in health care, and many more. In many cases, they are affected by techniques in artificial intelligence and machine learning.

Nov 23rd 2026
5-12 Weeks
Cloud Security on AWS (Coursera) Coursera
Edureka

Cloud Security on AWS (Coursera)

Welcome to the Cloud Security on AWS course, where you'll embark on a journey to acquire practical expertise in building a robust understanding of cloud security fundamentals, AWS security services, advanced threat detection, secure network design, data protection, encryption techniques, and incident response planning while ensuring compliance with AWS standards and governance best practices.

Nov 16th 2026
1 Week
Cybersecurity and Its Ten Domains (Coursera) Coursera
University System of Georgia

Cybersecurity and Its Ten Domains (Coursera)

This course is designed to introduce students, working professionals and the community to the exciting field of cybersecurity. Throughout the MOOC, participants will engage in community discourse and online interaction. Participants will gain knowledge and understanding of cybersecurity and its domains. They will engage with expertly produced videos, gain insight from industry experts, participate in knowledge assessments, practice assessing their environmental awareness, and gain access to materials that address governance and risk management, compliance, business continuity and disaster recovery, cryptography, software development security, access control, network security, security architecture, security operations, and physical and environmental security.

Nov 23rd 2026
5-12 Weeks
Cybercrime (Coursera) Coursera
Royal Holloway, University of London

Cybercrime (Coursera)

This course introduces fundamental notions of cybercrime. Namely, what cybercrime is, the main questions surrounding cybercrime, how cybercrime can be defined, and how it can be studied. You will learn about the difficulties in measuring the occurrence, the frequency and the impact of cybercrime, and build a scepticism on the reliability and the interpretation of cybercrime reports. You will be introduced to discussion about human aspects of cybercrime, in particular, the actors related to cybercrime, that is, the criminals, the victims, and law enforcement.

Nov 23rd 2026
4 Weeks
TCP/IP and Advanced Topics (Coursera) Coursera
University of Colorado System

TCP/IP and Advanced Topics (Coursera)

In this course, we give an in-depth study of the TCP/IP protocols. We examine the details of how IP enables communications across a collection of networks. We pay particular attention to the hierarchical structure of IP addresses and explain their role in ensuring scalability of the Internet. The role of address prefixes and the uses of masks are explained in details. We review in details about TCP three-way handshake, flow control, and congestion control. Furthermore, we provide an introduction to some advanced topics, including Multicast, SDN and security

Nov 9th 2026
5-12 Weeks
Cybersecurity and the Internet of Things (Coursera) Coursera
University System of Georgia

Cybersecurity and the Internet of Things (Coursera)

Welcome to “Cybersecurity and the Internet of Things”! This course is for you if you are curious about the most recent trends and activities in the internet capabilities and concerns about programmed devices. There are complexities and areas of necessary awareness when the industrial sector becomes connected to your home.

Nov 9th 2026
4 Weeks
Web Connectivity and Security in Embedded Systems (Coursera) Coursera
EIT Digital

Web Connectivity and Security in Embedded Systems (Coursera)

In this course, we will explore several technologies that bring modern devices together, facilitating a network of connected things and making devices internet enabled. We will discuss rules, protocols, and standards for these devices to communicate with each other in the network. We will also go through security and privacy issues and challenges in cyber physical systems (CPS). We will explore measures and techniques for securing systems from different perspectives. Possible attack models are introduced and solutions to tackle such attacks are discussed. Moreover, some basic concepts related to privacy in cyber physical systems are presented.

Nov 9th 2026
5-12 Weeks
Networking and Security in iOS Applications (Coursera) Coursera
University of California, Irvine

Networking and Security in iOS Applications (Coursera)

You will learn to extend your knowledge of making iOS apps so that they can securely interact with web services and receive push notifications. You'll learn how to store data securely on a device using Core Data. You’ll also learn to securely deploy apps to the App Store and beta users over-the-air. The format of the course is through a series of code tutorials. We will walk you through the creation of several apps that you can keep as a personal app toolbox. When you make your own apps after this course, you can bring in these capabilities as needed. When necessary we pop out of the code tutorials to talk about concepts at a higher level so that what you are programming makes sense.

Nov 9th 2026
4 Weeks
Practice Exam for ISC2 Certified in Cybersecurity (CC) (Coursera) Coursera
SkillUp EdTech

Practice Exam for ISC2 Certified in Cybersecurity (CC) (Coursera)

The need for cybersecurity professionals is on the rise. According to an ISC2 report, over 4 million jobs remain open because of the lack of skilled and qualified cybersecurity professionals. ISC2’s Certified in Cybersecurity (CC) certification exam is an entry-level certification that can help you validate your cybersecurity knowledge and build credibility. If you have been preparing for the exam and want to check your readiness, this course is for you.

Nov 16th 2026
2 Weeks