Using the CISA Incident Response Playbook at your Organization (IR211)

#1736921: Using the CISA Incident Response Playbook at your Organization (IR211) - June 9, 2026

Description:	Agenda The Cybersecurity and Infrastructure Security Agency (CISA) is proud to offer the Using the CISA Incident Response Playbook at your Organization (IR211) event. The 200-level training events are open to government employees and contractors across Federal, State, Local, Tribal, and Territorial government, educational partners, and critical infrastructure partners. Please use your organization email address when registering. This course is ideal for those working in cybersecurity roles who are interested in learning technical incident response skills and requires active engagement from all participants. Produced in accordance with Executive Order 14028, "Improving the Nation's Cybersecurity" CISA released the Federal Government Cybersecurity Incident and Vulnerability Response Playbooks that provide federal civilian agencies with a standard set of procedures to respond to vulnerabilities and incidents impacting Federal Civilian Executive Branch (FCEB) networks. This course introduces students to the Incident Response Playbook that describes the process FCEB agencies should follow for confirmed malicious cyber activity for which a major incident has been declared or not yet been reasonably ruled out. The course will include a tabletop discussion format that follows a simulated IR event/scenario and guides students through the CISA IR checklist and IR phases. While the playbooks are intended for federal agencies, CISA encourages public and private sector partners to review them to help inform their own incident response practices. Experience these benefits and more: Key guidance for organizations: Introduce the CISA Incident Response (IR) Playbook with an overview of the IR phases, key resources, standardizing shared practices, and the Incident Response Checklist. Learn about roles, responsibilities, and the importance of communication during an incident response. Lessons learned: This course also highlights lessons learned and common missteps when implementing an IR playbook. Peer activity and discussion: A guided incident response tabletop scenario and discussion where students will be required to follow the IR process using the CISA IR checklist. The tabletop discussion will help students to better comprehend and apply critical thinking throughout the NIST/CISA IR process. Registration for this event is extremely limited; only register if you plan to attend, so we can maximize participation.
More info:	https://cisa.webex.com/webappng/sites/cisa/meeting/register/974e5b8ab4c34859a8639ca02fc03552?ticket=4832534b0000000602b6426bccfc892901aa923a04cbbf268391c07d956b0c1dee97b30cda9d0e2a&timestamp=1778504581443&RGID=re25a5bbeac8a9668028b3086ecf1d660&isAutoPopRegisterForm=false

Description:

Agenda

The Cybersecurity and Infrastructure Security Agency (CISA) is proud to offer the Using the CISA Incident Response Playbook at your Organization (IR211) event. The 200-level training events are open to government employees and contractors across Federal, State, Local, Tribal, and Territorial government, educational partners, and critical infrastructure partners. Please use your organization email address when registering.

This course is ideal for those working in cybersecurity roles who are interested in learning technical incident response skills and requires active engagement from all participants.

Produced in accordance with Executive Order 14028, "Improving the Nation's Cybersecurity" CISA released the Federal Government Cybersecurity Incident and Vulnerability Response Playbooks that provide federal civilian agencies with a standard set of procedures to respond to vulnerabilities and incidents impacting Federal Civilian Executive Branch (FCEB) networks. This course introduces students to the Incident Response Playbook that describes the process FCEB agencies should follow for confirmed malicious cyber activity for which a major incident has been declared or not yet been reasonably ruled out. The course will include a tabletop discussion format that follows a simulated IR event/scenario and guides students through the CISA IR checklist and IR phases. While the playbooks are intended for federal agencies, CISA encourages public and private sector partners to review them to help inform their own incident response practices.

Experience these benefits and more:

Key guidance for organizations: Introduce the CISA Incident Response (IR) Playbook with an overview of the IR phases, key resources, standardizing shared practices, and the Incident Response Checklist. Learn about roles, responsibilities, and the importance of communication during an incident response.

Lessons learned: This course also highlights lessons learned and common missteps when implementing an IR playbook.

Peer activity and discussion: A guided incident response tabletop scenario and discussion where students will be required to follow the IR process using the CISA IR checklist. The tabletop discussion will help students to better comprehend and apply critical thinking throughout the NIST/CISA IR process.

Registration for this event is extremely limited; only register if you plan to attend, so we can maximize participation.

More info:

https://cisa.webex.com/webappng/sites/cisa/meeting/register/974e5b8ab4c34859a8639ca02fc03552?ticket=4832534b0000000602b6426bccfc892901aa923a04cbbf268391c07d956b0c1dee97b30cda9d0e2a&timestamp=1778504581443&RGID=re25a5bbeac8a9668028b3086ecf1d660&isAutoPopRegisterForm=false

Date added	May 11, 2026, 3:10 p.m.
Source	Webex
Subjects	Incident Response / Incident Handling PodCasts / Webcast / Webinar / eSummit / Virtual Event etc. Security Management/Strategic Security/ROI/ROSI - CISO and Higher Level US Cybersecurity and Infrastructure Security Agency (CISA) - Previously US-CERT
Venue	June 9, 2026, midnight - June 9, 2026, midnight