Cyber Crisis Management and Incident Response Coordination (BCCM-025) Training Course

Cyber Crisis Management and Incident Response Coordination

Ransomware, data breaches and destructive cyber attacks can bring an organisation to a standstill within hours. These incidents are no longer just technical problems…

5 daysClassroom or online

49Upcoming dates

12Cities

£2,250Fees from

Course overview

Introduction

Ransomware, data breaches and destructive cyber attacks can bring an organisation to a standstill within hours. These incidents are no longer just technical problems: they quickly become business crises involving executives, legal advisers, regulators, customers, insurers and the media, often while key systems are unavailable.

This Cyber Crisis Management and Incident Response Coordination training course prepares participants to coordinate the organisational response to major cyber incidents. Participants learn how technical incident response connects with crisis management, how to make critical decisions such as system shutdown or ransom considerations, how to meet notification obligations, how to communicate under scrutiny and how to coordinate recovery.

The course is suitable for both technical and non-technical professionals and uses realistic cyber crisis simulations throughout.

Course Objectives

By the end of this training course, participants will be able to:

Explain the anatomy of major cyber incidents and their business impacts
Connect technical incident response with crisis management structures
Activate and coordinate a cyber crisis team
Make critical decisions under uncertainty during a cyber attack
Manage legal, regulatory and contractual notification duties
Communicate with staff, customers, regulators and the media
Coordinate recovery and continuity of operations without systems
Capture lessons and improve cyber crisis readiness

Target Audience

This training course is suitable for a wide range of professionals, including:

Crisis management team members
Information security and incident response managers
Business continuity and IT disaster recovery professionals
Legal, compliance and data protection officers
Communications and public relations professionals
Senior managers with crisis responsibilities

Training Methodology

The course centres on a progressive cyber crisis simulation in which participants play crisis team roles as an attack unfolds. Briefings on attack types, legal duties and communication provide the knowledge needed for each stage, and facilitated debriefs draw out lessons and improvements.

Target Competencies

Cyber crisis team coordination
Cyber incident decision making
Breach notification management
Cyber crisis communication
Recovery coordination
Cyber readiness improvement

Course outline

1Day One: The Cyber Crisis Landscape

Ransomware, data theft and destructive attacks explained simply
How cyber incidents escalate into business crises
Business, legal and reputational impacts of major attacks
Lessons from well-known cyber crises
Roles of IT, security, legal, communications and executives
Cyber insurance and external response partners
Self-assessment of cyber crisis readiness

2Day Two: Incident Response and Crisis Structures

Technical incident response phases and teams
Escalation criteria from incident to crisis
Cyber crisis team activation and roles
Working with forensic and specialist response firms
Out-of-band communication when systems are compromised
Decision logs and evidence preservation
Simulation: detection and escalation of an attack

3Day Three: Critical Decisions During a Cyber Attack

Containment decisions and shutting down systems
Balancing investigation, recovery and business needs
Ransom demands and the considerations involved
Engaging law enforcement and national cyber agencies
Managing third-party and supply chain impacts
Ethical and legal dilemmas in cyber response
Simulation: executive decisions under pressure

4Day Four: Notification and Communication

Regulatory and data protection notification duties
Contractual notifications to customers and partners
Communicating with staff when systems are unavailable
Customer communication and support during a breach
Media and social media management for cyber incidents
Coordinating legal privilege and communications
Exercise: drafting breach notifications and statements

5Day Five: Recovery and Readiness Improvement

Prioritising system restoration using business impact analysis
Manual workarounds and continuity without technology
Validating systems are clean before restoration
Post-incident review and lessons learned
Building and exercising cyber crisis playbooks
Reporting cyber readiness to the board
Personal action plan for cyber crisis management

Frequently asked questions

How long is the Cyber Crisis Management and Incident Response Coordination course?

The course runs over 5 days of classroom training, usually Monday to Friday.

When is the next Cyber Crisis Management and Incident Response Coordination course?

The next public date is 7 - 11 Dec 2026 in London. There are 49 upcoming dates in total.

Where is this course held?

Upcoming sessions run in London, Barcelona, Frankfurt, Vienna, Amsterdam, Cape Town, Dubai, Geneva, Kuala Lumpur, Madrid, Paris, Rome.

Can I take Cyber Crisis Management and Incident Response Coordination online?

Yes. Every date can also be joined live online in a virtual classroom with the trainer, for £1,280 per participant. Choose "Live online" in the dates table when you register.

How much does the course cost?

Fees start from £2,250 per delegate, depending on the city. Fees include tuition and course materials.

Do participants receive a certificate?

Yes. Delegates who complete the course receive a London Leadership Management Innovation certificate of completion.

Can this course be delivered in-house for our team?

Yes. LLMI can tailor and deliver this course privately for your organisation at your premises or in one of our training cities.

Course information last updated 14 November 2026.

Cyber Crisis Management and Incident Response Coordination

Course overview

Introduction

Course Objectives

Target Audience

Training Methodology

Target Competencies

Course outline

Dates and fees

Frequently asked questions

More Business Continuity and Crisis Management courses

Agile Thinking in a Changing Business World

Business Continuity & Disaster Recovery Architecture

Business Continuity Coordinator Practitioner Programme

Training a team?