About This Course
The PECB Certified Incident Responder (CIR) programme is a hands-on, technical course for professionals who detect, analyse and contain cybersecurity incidents. Delivered fully self-paced and online, it covers the full response lifecycle — from strategic handling of incidents to responding to ransomware and malware, detecting perimeter threats, and dealing with persistent mechanisms using forensic techniques.
The emphasis is on practical response: evaluating attack vectors, analysing malware behaviour, spotting external threats early and building remediation plans that stop recurring attacks. It suits SOC analysts and incident responders who want to sharpen their technical skills.
Course Information
What You Will Learn
Course Curriculum
- Incident response concepts and lifecycle
- Strategic incident handling
- Roles and coordination
- Preparation and readiness
- Ransomware attack vectors and mitigation
- Malware behaviour analysis
- Containment and eradication
- Recovery
- Detecting external threats
- Early detection techniques
- Analysis and triage
- Responding to perimeter threats
- Identifying persistent mechanisms
- Forensic techniques in response
- Remediation of recurring threats
- Continual improvement
- The five competency domains
- Revision and exam technique
- Booking and sitting the PECB exam
Get the Full Syllabus as a PDF
Curriculum, exam format & everything included — sent straight to your inbox.
All You Need to Know
This programme suits professionals who respond to cyber incidents, including:
- Incident response team members and cybersecurity analysts
- Security operations centre (SOC) personnel
- IT security professionals sharpening technical skills
- Managers and team leaders coordinating incident response
A fundamental understanding of cybersecurity principles and incident-response basics is recommended before enrolling.
The PECB Certified Incident Responder exam covers five competency domains: fundamental concepts, ransomware response, malware response, perimeter-threat detection, and persistent-mechanism response. Completing the training earns 31 CPD credits.
Frequently Asked Questions
Yes — it is delivered online and self-paced, covering the same competency domains as PECB’s instructor-led programme so you can study around your schedule.
Yes — it is hands-on and technical, covering ransomware, malware, perimeter and persistent threats, plus forensic techniques.
A fundamental understanding of cybersecurity principles and incident-response basics is recommended.
After passing the exam and meeting PECB’s requirements you can apply for the PECB Certified Incident Responder credential.
Yes — the self-paced kit includes one certification exam and one free exam retake.