SEC504: Hacker Tools, Techniques, and Incident Handling

Experience SANS training through course previews.
Learn MoreLet us help.
Contact usConnect, learn, and share with other cybersecurity professionals
Engage, challenge, and network with fellow CISOs in this exclusive community of security leaders
Become a member for instant access to our free resources.
Sign UpMission-focused cybersecurity training for government, defense, and education
Explore industry-specific programming and customized training solutions
Sponsor a SANS event or research paper
We're here to help.
Contact UsApply your credits to renew your certifications
Attend a live, instructor-led class at a location near you or remotely, or train on your time over 4 months
Course material is geared for cyber security professionals with hands-on experience
Apply what you learn with hands-on exercises and labs
Explore industry-leading strategies for conducting cybersecurity risk assessments that deliver actionable insights to protect your organization's critical assets and meet regulatory requirements.
James is top notch. He brings so much expertise and is precise with clarifying when something doesn't make sense. By far my favorite SANS instructor!
Ever-evolving regulations require organizations to conduct cybersecurity risk assessments for compliance and audit purposes. Yet many organizations approach this without a specific strategy, resulting in random defenses, ineffective programs, and financial losses. This cybersecurity risk assessment course moves beyond theoretical concepts to provide practical knowledge for preparing and conducting meaningful risk assessments. Course participants learn to identify relevant risks within your specific organizational context, uncover these risks effectively, and present results to leadership for actionable outcomes. Through hands-on exercises and real-world scenarios using the Cyber42 leadership simulation game, you'll gain the foundational knowledge and practical skills needed to perform comprehensive risk assessments that directly impact an organization's security posture.
James Tarala, managing partner at Cyverity, co-created the CIS Controls and Cybersecurity Standards Scorecard, transforming cybersecurity governance and empowering global organizations to operationalize risk into actionable defense strategies.
Read more about James TaralaExplore the course syllabus below to view the full range of topics covered in LDR419: Performing A Cybersecurity Risk Assessment.
Section one teaches students the foundational skills needed to prepare for and plan a cybersecurity risk assessment, emphasizing the importance of understanding business context and governance frameworks.
Section two guides students through performing a cybersecurity risk assessment using practical tools, real-world case studies, and instructor support, while also teaching how to act on assessment results and engage stakeholders.
Daily focus is on the leadership of technical teams. Includes titles such as Technical Director, Manager, and Team Lead.
Explore learning pathResponsible for accepting system risk on behalf of the organization, ensuring acceptable security levels for mission, reputation, and operations.
Explore learning pathResponsible for establishing vision and direction for an organization's cybersecurity operations and resources and their impact on digital and physical spaces. Possesses authority to make and execute decisions that impact an organization broadly, including policy approval and stakeholder engagement.
Explore learning pathResponsible for developing and maintaining cybersecurity plans, strategy, and policy to support and align with organizational cybersecurity initiatives and regulatory compliance.
Explore learning pathWhen purchasing a live, instructor-led course, add 4 months of online access. View price in the info icons below.
Add 6 months of hands-on skills practice. Add to your cart when purchasing your course.
Anyone looking to change careers [into cybersecurity] would be able to get their sea legs under them with the instruction provided.
The content is very relevant and can be directly applied to my work. It helped me get an overview on risk management frameworks before diving into how we do a risk assessment.
The Cyber42 exercises were a great way to demonstrate the realistic circumstance of having to weigh imperfect options against each other and make the best of what we have.
It gives people a good understanding of how we got to where we are with risk assessments and audits and the politics often involved.
Get feedback from the world’s best cybersecurity experts and instructors
Choose how you want to learn - online, on demand, or at our live in-person training events
Get access to our range of industry-leading courses and resources