Five-day professional programmes in 14 citiesClassroom, online and in-house info@aractech.com +31 85 7444446

Course BCCM-025

Cyber Crisis Management and Incident Response Coordination

Ransomware, data breaches and destructive cyber attacks can bring an organisation to a standstill within hours. The outline covers The Cyber Crisis Landscape, Incident Response and Crisis Structures, Critical Decisions D...

  • 5 daysClassroom or online
  • 49Upcoming dates
  • 12Cities
  • €1,825Fees from

Choose your format and date

  • 5 days
  • 09:00–14:00
  • Certificate of attendance

Classroom sessions

  1. 7–11 Dec 2026

    London

    Next date
    €2,915 + VAT
    Register
  2. 14–18 Dec 2026

    Barcelona

    €2,275 + VAT
    Register
  3. 21–25 Dec 2026

    Frankfurt

    €2,175 + VAT
    Register
  4. 4–8 Jan 2027

    London

    €2,915 + VAT
    Register
  5. 11–15 Jan 2027

    Barcelona

    €2,275 + VAT
    Register
  6. 18–22 Jan 2027

    Frankfurt

    €2,175 + VAT
    Register
  7. 25–29 Jan 2027

    Vienna

    €3,425 + VAT
    Register
  8. 1–5 Feb 2027

    Amsterdam

    €3,215 + VAT
    Register
  9. 8–12 Feb 2027

    London

    €2,915 + VAT
    Register
  10. 15–19 Feb 2027

    Barcelona

    €2,275 + VAT
    Register
  11. 22–26 Feb 2027

    Frankfurt

    €2,175 + VAT
    Register
  12. 1–5 Mar 2027

    Frankfurt

    €2,175 + VAT
    Register
  13. 8–12 Mar 2027

    Cape Town

    Lowest fee
    €1,825 + VAT
    Register
  14. 15–19 Mar 2027

    London

    €2,915 + VAT
    Register
  15. 22–26 Mar 2027

    Barcelona

    €2,275 + VAT
    Register
  16. 5–9 Apr 2027

    Barcelona

    €2,275 + VAT
    Register
  17. 12–16 Apr 2027

    Frankfurt

    €2,175 + VAT
    Register
  18. 19–23 Apr 2027

    Dubai

    €2,845 + VAT
    Register
  19. 26–30 Apr 2027

    London

    €2,915 + VAT
    Register
  20. 3–7 May 2027

    London

    €2,915 + VAT
    Register
  21. 10–14 May 2027

    Barcelona

    €2,275 + VAT
    Register
  22. 17–21 May 2027

    Frankfurt

    €2,175 + VAT
    Register
  23. 24–28 May 2027

    Geneva

    €3,315 + VAT
    Register
  24. 7–11 Jun 2027

    London

    €2,915 + VAT
    Register
  25. 14–18 Jun 2027

    Barcelona

    €2,275 + VAT
    Register
  26. 21–25 Jun 2027

    Frankfurt

    €2,175 + VAT
    Register
  27. 5–9 Jul 2027

    Frankfurt

    €2,175 + VAT
    Register
  28. 12–16 Jul 2027

    Kuala Lumpur

    €2,425 + VAT
    Register
  29. 19–23 Jul 2027

    London

    €2,915 + VAT
    Register
  30. 26–30 Jul 2027

    Barcelona

    €2,275 + VAT
    Register
  31. 2–6 Aug 2027

    Barcelona

    €2,275 + VAT
    Register
  32. 9–13 Aug 2027

    Frankfurt

    €2,175 + VAT
    Register
  33. 16–20 Aug 2027

    Madrid

    €3,400 + VAT
    Register
  34. 23–27 Aug 2027

    London

    €2,915 + VAT
    Register
  35. 6–10 Sep 2027

    London

    €2,915 + VAT
    Register
  36. 13–17 Sep 2027

    Barcelona

    €2,275 + VAT
    Register
  37. 20–24 Sep 2027

    Frankfurt

    €2,175 + VAT
    Register
  38. 4–8 Oct 2027

    Paris

    €2,810 + VAT
    Register
  39. 11–15 Oct 2027

    London

    €2,915 + VAT
    Register
  40. 18–22 Oct 2027

    Barcelona

    €2,275 + VAT
    Register
  41. 25–29 Oct 2027

    Frankfurt

    €2,175 + VAT
    Register
  42. 1–5 Nov 2027

    Frankfurt

    €2,175 + VAT
    Register
  43. 8–12 Nov 2027

    Rome

    €2,830 + VAT
    Register
  44. 15–19 Nov 2027

    London

    €2,915 + VAT
    Register
  45. 22–26 Nov 2027

    Barcelona

    €2,275 + VAT
    Register
  46. 6–10 Dec 2027

    Barcelona

    €2,275 + VAT
    Register
  47. 13–17 Dec 2027

    Frankfurt

    €2,175 + VAT
    Register
  48. 20–24 Dec 2027

    Vienna

    €3,425 + VAT
    Register
  49. 27–31 Dec 2027

    London

    €2,915 + VAT
    Register

Online / Live sessions

  1. 7–11 Dec 2026

    Live virtual classroom

    Next date
    €1,625 + VAT
    Register
  2. 14–18 Dec 2026

    Live virtual classroom

    €1,625 + VAT
    Register
  3. 21–25 Dec 2026

    Live virtual classroom

    €1,625 + VAT
    Register
  4. 4–8 Jan 2027

    Live virtual classroom

    €1,625 + VAT
    Register
  5. 11–15 Jan 2027

    Live virtual classroom

    €1,625 + VAT
    Register
  6. 18–22 Jan 2027

    Live virtual classroom

    €1,625 + VAT
    Register
  7. 25–29 Jan 2027

    Live virtual classroom

    €1,625 + VAT
    Register
  8. 1–5 Feb 2027

    Live virtual classroom

    €1,625 + VAT
    Register
  9. 8–12 Feb 2027

    Live virtual classroom

    €1,625 + VAT
    Register
  10. 15–19 Feb 2027

    Live virtual classroom

    €1,625 + VAT
    Register
  11. 22–26 Feb 2027

    Live virtual classroom

    €1,625 + VAT
    Register
  12. 1–5 Mar 2027

    Live virtual classroom

    €1,625 + VAT
    Register
  13. 8–12 Mar 2027

    Live virtual classroom

    €1,625 + VAT
    Register
  14. 15–19 Mar 2027

    Live virtual classroom

    €1,625 + VAT
    Register
  15. 22–26 Mar 2027

    Live virtual classroom

    €1,625 + VAT
    Register
  16. 5–9 Apr 2027

    Live virtual classroom

    €1,625 + VAT
    Register
  17. 12–16 Apr 2027

    Live virtual classroom

    €1,625 + VAT
    Register
  18. 19–23 Apr 2027

    Live virtual classroom

    €1,625 + VAT
    Register
  19. 26–30 Apr 2027

    Live virtual classroom

    €1,625 + VAT
    Register
  20. 3–7 May 2027

    Live virtual classroom

    €1,625 + VAT
    Register
  21. 10–14 May 2027

    Live virtual classroom

    €1,625 + VAT
    Register
  22. 17–21 May 2027

    Live virtual classroom

    €1,625 + VAT
    Register
  23. 24–28 May 2027

    Live virtual classroom

    €1,625 + VAT
    Register
  24. 7–11 Jun 2027

    Live virtual classroom

    €1,625 + VAT
    Register
  25. 14–18 Jun 2027

    Live virtual classroom

    €1,625 + VAT
    Register
  26. 21–25 Jun 2027

    Live virtual classroom

    €1,625 + VAT
    Register
  27. 5–9 Jul 2027

    Live virtual classroom

    €1,625 + VAT
    Register
  28. 12–16 Jul 2027

    Live virtual classroom

    €1,625 + VAT
    Register
  29. 19–23 Jul 2027

    Live virtual classroom

    €1,625 + VAT
    Register
  30. 26–30 Jul 2027

    Live virtual classroom

    €1,625 + VAT
    Register
  31. 2–6 Aug 2027

    Live virtual classroom

    €1,625 + VAT
    Register
  32. 9–13 Aug 2027

    Live virtual classroom

    €1,625 + VAT
    Register
  33. 16–20 Aug 2027

    Live virtual classroom

    €1,625 + VAT
    Register
  34. 23–27 Aug 2027

    Live virtual classroom

    €1,625 + VAT
    Register
  35. 6–10 Sep 2027

    Live virtual classroom

    €1,625 + VAT
    Register
  36. 13–17 Sep 2027

    Live virtual classroom

    €1,625 + VAT
    Register
  37. 20–24 Sep 2027

    Live virtual classroom

    €1,625 + VAT
    Register
  38. 4–8 Oct 2027

    Live virtual classroom

    €1,625 + VAT
    Register
  39. 11–15 Oct 2027

    Live virtual classroom

    €1,625 + VAT
    Register
  40. 18–22 Oct 2027

    Live virtual classroom

    €1,625 + VAT
    Register
  41. 25–29 Oct 2027

    Live virtual classroom

    €1,625 + VAT
    Register
  42. 1–5 Nov 2027

    Live virtual classroom

    €1,625 + VAT
    Register
  43. 8–12 Nov 2027

    Live virtual classroom

    €1,625 + VAT
    Register
  44. 15–19 Nov 2027

    Live virtual classroom

    €1,625 + VAT
    Register
  45. 22–26 Nov 2027

    Live virtual classroom

    €1,625 + VAT
    Register
  46. 6–10 Dec 2027

    Live virtual classroom

    €1,625 + VAT
    Register
  47. 13–17 Dec 2027

    Live virtual classroom

    €1,625 + VAT
    Register
  48. 20–24 Dec 2027

    Live virtual classroom

    €1,625 + VAT
    Register
  49. 27–31 Dec 2027

    Live virtual classroom

    €1,625 + VAT
    Register

Introduction

Course overview

Ransomware, data breaches and destructive cyber attacks can bring an organisation to a standstill within hours. These incidents are no longer just technical problems: they quickly become business crises involving executives, legal advisers, regulators, customers, insurers and the media, often while key systems are unavailable.

This Cyber Crisis Management and Incident Response Coordination training course prepares participants to coordinate the organisational response to major cyber incidents. Participants learn how technical incident response connects with crisis management, how to make critical decisions such as system shutdown or ransom considerations, how to meet notification obligations, how to communicate under scrutiny and how to coordinate recovery.

The course is suitable for both technical and non-technical professionals and uses realistic cyber crisis simulations throughout.

View full course outline

What you will achieve

Learning objectives

  • Explain the anatomy of major cyber incidents and their business impacts
  • Connect technical incident response with crisis management structures
  • Activate and coordinate a cyber crisis team
  • Make critical decisions under uncertainty during a cyber attack
  • Manage legal, regulatory and contractual notification duties
  • Communicate with staff, customers, regulators and the media
  • Coordinate recovery and continuity of operations without systems
  • Capture lessons and improve cyber crisis readiness

Who should attend

Target audience

  • Crisis management team members
  • Information security and incident response managers
  • Business continuity and IT disaster recovery professionals
  • Legal, compliance and data protection officers
  • Communications and public relations professionals
  • Senior managers with crisis responsibilities

Methodology

Learning approach

  • The course centres on a progressive cyber crisis simulation in which participants play crisis team roles as an attack unfolds. Briefings on attack types, legal duties and communication provide the knowledge needed for each stage, and facilitated debriefs draw out lessons and improvements.

Complete course outline

Five focused days of learning and application

The timings provided are estimates and may vary depending on the number of participants and the discussions taking place during the sessions. They are indicative only and do not constitute a binding commitment.

Day 1

The Cyber Crisis Landscape

  1. Ransomware, data theft and destructive attacks explained simply
  2. How cyber incidents escalate into business crises
  3. Business, legal and reputational impacts of major attacks
  4. Lessons from well-known cyber crises
  5. Coffee break
  6. Lessons from well-known cyber crises (continued)
  7. Roles of IT, security, legal, communications and executives
  8. Cyber insurance and external response partners
  9. Self-assessment of cyber crisis readiness

Day 2

Incident Response and Crisis Structures

  1. Technical incident response phases and teams
  2. Escalation criteria from incident to crisis
  3. Cyber crisis team activation and roles
  4. Working with forensic and specialist response firms
  5. Coffee break
  6. Working with forensic and specialist response firms (continued)
  7. Out-of-band communication when systems are compromised
  8. Decision logs and evidence preservation
  9. Simulation: detection and escalation of an attack

Day 3

Critical Decisions During a Cyber Attack

  1. Containment decisions and shutting down systems
  2. Balancing investigation, recovery and business needs
  3. Ransom demands and the considerations involved
  4. Engaging law enforcement and national cyber agencies
  5. Coffee break
  6. Engaging law enforcement and national cyber agencies (continued)
  7. Managing third-party and supply chain impacts
  8. Ethical and legal dilemmas in cyber response
  9. Simulation: executive decisions under pressure

Day 4

Notification and Communication

  1. Regulatory and data protection notification duties
  2. Contractual notifications to customers and partners
  3. Communicating with staff when systems are unavailable
  4. Customer communication and support during a breach
  5. Coffee break
  6. Customer communication and support during a breach (continued)
  7. Media and social media management for cyber incidents
  8. Coordinating legal privilege and communications
  9. Exercise: drafting breach notifications and statements

Day 5

Recovery and Readiness Improvement

  1. Prioritising system restoration using business impact analysis
  2. Manual workarounds and continuity without technology
  3. Validating systems are clean before restoration
  4. Post-incident review and lessons learned
  5. Coffee break
  6. Post-incident review and lessons learned (continued)
  7. Building and exercising cyber crisis playbooks
  8. Reporting cyber readiness to the board
  9. Personal action plan for cyber crisis management

Ready to book?

Cyber Crisis Management and Incident Response Coordination

Next session: 7 - 11 December 2026, London

Course FAQs

Questions about this course

What participants and training managers usually ask before booking Cyber Crisis Management and Incident Response Coordination. Can't find your answer?

WhatsApp
What does Cyber Crisis Management and Incident Response Coordination (BCCM-025) cover?

This course covers Business Continuity and Crisis Management through a structured five-day outline focused on practical application, discussion, and implementation planning.

When is the next available session?

The next scheduled session starts on 7 - 11 December 2026. See the course schedules section for the available dates and delivery formats.

Who should attend this course?

Crisis management team members, Information security and incident response managers, Business continuity and IT disaster recovery professionals

Is bilingual course delivery available?

Yes. All course materials and presentations are provided in English, while bilingual explanation and discussion support may be available depending on the selected location and trainer availability. For example, when attending a course in Istanbul, you may request a Turkish-speaking trainer to explain the English course content in Turkish. Arabic explanation support may also be requested at this location. Other languages are available in selected cities. You can choose your preferred language support as an optional preference during registration.

How can I register for a session?

Use any Register button next to the available course dates to open the participant registration page and submit your booking request for the selected session.

Is this course available online as well as classroom-based?

Check the course schedules section for currently published classroom and Online / Live sessions.

Where are classroom sessions delivered?

Current classroom venues include London, Barcelona, Frankfurt, Vienna, Amsterdam, Cape Town, Dubai, Geneva, Kuala lumpur, Madrid, Paris, Rome.

How long is the training programme?

The programme runs for five days from 09:00 to 14:00, which gives 25 contact hours, including a daily 30-minute break (22.5 hours of instruction).