Incident Response and Forensics

Cyber Security

Unit Code
Level 4
Distance Learning
Class Room
Unit Code
Level 4
Distance Learning Fee
Face to Face Fee
Accelerate your career with London Institute of Business & Technology's flexible executive pathway programmes today!
Total Fee £1600

£2360 (£1600 during the tuition waiver period)

Please see the Tuition Fee section to see if you are eligible for a scholarship.
Course Overview

In this unit the learner will examine Incident Response, Computer Emergency Response Teams (CERTS), and events requiring investigative techniques. Learners will identify and examine aligned business tasks and task forces including Disaster Recovery, Business Continuity Management and Crisis Management.

The unit then focuses on exploring cyber-related incident investigations, including evidential analysis gathering, logging and reporting. Learners will have the opportunity to look at case studies and assess how the approaches used could be applied into their own workplace.

Course Content


Computer Incident Responses

  • What is an incident Response?
  • What is a Computer Emergency Response Team (CERT)?
  • Structure and Team of CERT?
  • Tools of CERT
  • Roles of CERT and its importance
  • What does the Incident Response Team do?

Overview CM, DR and BC

  • What is DR?
  • What is CM
  • Crisis Management Planning
  • The Cyber Crisis Plan
  • What is BC?
  • Understanding More about CM, DR and BC
  • What is BCDR?
  • Objectives of a BCDR Plan
  • Standard and Protocol underpinning BC, DR and CR
  • Application of underpinning BC, DR and CR
  • BCDR planning Steps

Major Investigation of incident plan

  • Detecting security incident
  • Understanding the attackers methodology and goals
  • Types of cyber security incidents.
  • Steps for successful incident investigation

Computer Forensic

  • What is computer forensic?
  • Types of computer Forensic
  • How does computer forensic work
  • Computer Forensic tools
  • Major cyber-related investigation

Computer incident investigation

  • Handling of digital evidence
  • Conducting computer incident investigation
  • Law and professional practice

Incident Handling

  • What is incident handling?
  • Incident Handling vs Incident response
  • Importance of evidence preservation

Legal Requirements and Considerations

  • Legal Requirements and Considerations
Learning Outcome & Assessment Criteria

1. Understand the role and composite parts of Incident Response as a business function and how CERTS operate

  1. Explain the people, structures, processes and tools involved in Computer Incident Responses
  2. Discuss the different roles within a Computer Emergency Response Team and their importance

2.  Understand aligned task/task forces for Business Continuity, Disaster Recovery and Crisis Management

  1. Explain the terms BC, DR and CM
  2. Analyse the standards, protocols and concepts underpinning BC, DR and CR and their application within organisations

3.  Understand how major computer incidents are formally investigated

  1. Explain the processes, people and tools used in a planned and structured major incident investigation
  2. Analyse how evidence is contained, analysed, processed and deployed in a major cyber-related investigation

4.  Understand laws and guidance in relation to the conduct of planned and structured major incident investigations

  1. Examine how relevant laws and professional practice are applied to computer incident investigations
  • The assessment strategy for this course is designed to test all the learning outcomes.
  • Learners must demonstrate successful achievement of all learning outcomes to pass the course.
Assessment Marking Criteria


Citizens of the following countries are eligible for a 50% scholarship upon writing a personal statement. All scholarships are to be approved by the Academic Board. The list of countries are: Sri Lanka, Indonesia, Philippines, Bhutan, Morocco, Vietnam, Papua New Guinea, Laos, Cambodia, India, Nigeria, Ghana, Bangladesh, Laos, Myanmar, Pakistan, Nepal and South Africa. Please talk to your student counselor and ask for the Coupon Code to get the 50% Tuition Waiver.

  • The assessment criteria for a pass will be presented with the summative exercise.
  • Further information and guidance on the assessment will be made available through the tutor.
Unit Pass Requirements

To pass the unit a 40% overall grade must be achieved.

Frequently Asked Questions
What is included in the cost of my programme?
  • All course material, including online modules and written assignments
  • Unlimited personal tutor support with online sessions
  • Dedicated student support
  • Access to an online community learning forums
  • Assignment marking and feedback
Am I eligible for this programme?

You are eligible if you meet our stipulated entry requirements.

Standard ROUTE

Easy Monthly Payments


Access to LMS

Easy 12 instalments

Complete in 12 months

Unlimited tutor support

Requires submitting 1 assignment per month



Easy Monthly Payments


Access to LMS

Easy 6 instalments

Complete in 6 months

Priority support

Unlimited tutor support

Requires submitting 2 assignments per month

Start TrialEnrol




Access to LMS

No monthly payments

Complete at your own pace

Priority support

Unlimited tutor support

Dedicated counselor

No additional bank charges

Career guidance & advise

Start TrialEnrol
Download Brochure

The London Institute of Business and Technology holds an official registration with the Intellectual Property Office, bearing the Trademark Number UK00003896607.

UK Register of Learning Providers - Provider Reference Number (UKPRN): 10092833