Cover image for Cybersecurity Audit School: Event Detection, Incident Response, and Recovery

Cybersecurity Audit School: Event Detection, Incident Response, and Recovery

Practical skills in logging, monitoring, and alerting and incident response (IR) testing

RWSGHM

Created by Ron Woerner, Sophie Goodwin, Hernan Murdock

Explore the essentials of cybersecurity auditing by learning how to detect events, respond to incidents, and support recovery. Build practical skills in logging, monitoring, and alerting while understanding how to plan and test incident response. Gain the confidence to make informed decisions in real-world security situations.

ACI | Aug 2026 | 109 min

What You Will Learn

You will start by exploring the basics of logging, monitoring, and alerting, then move into hands-on incident response testing. As you progress, you will practice analyzing response plans and apply what you learn to real-world scenarios. Each section builds on the last, helping you connect core concepts to practical workplace tasks.

Key Features

  • Learn to identify and evaluate event detection and monitoring practices
  • Analyze and test incident response planning for stronger organizational security
  • Apply digital forensics and recovery concepts to support business continuity

Target Audience

Ideal for cybersecurity auditors, IT auditors, and security professionals at the beginner level. If you are new to the field or looking to refresh your knowledge, you will benefit from clear explanations and structured guidance. This course is especially helpful if your goal is to improve event detection, incident response, and recovery skills.

Related courses

Cover image for Cybersecurity Audit School: Auditing Cybersecurity
Cover image for Cybersecurity Audit School: Audit Evidence and Reporting
Cover image for Microsoft Sentinel Skills
Cover image for Python for Security
Cover image for AZ-500: Microsoft Azure Security Technologies
Cover image for SC-200 Microsoft Security Operations Analyst