Module v1.0 · Required
CYBER-303 - Incident Reporting, Recovery, and Improvement: learning module
Report security concerns clearly and support controlled recovery and learning.
Distinguish an event from an incident; preserve useful evidence; report through the right channel; and capture a practical improvement action.
Context and purpose
Understand the outcome, boundaries, and evidence expected from this class track.
Report security concerns clearly and support controlled recovery and learning.
This review-stage module is a platform-owned baseline. An adopting instructor should align terminology, examples, policy references, and escalation contacts to the organization before activation.
- Purpose and intended audience are clear
- Permitted and prohibited practice boundaries are visible
- Evidence and completion expectations are stated
- Adopter-specific policy questions are captured