C)IHE: Certified Incident Handling Engineer

Understanding The Course Goals

The Certified Incident Handling Engineer course, C)IHE, is designed to help Incident Handlers, System Administrators, and Security Engineers understand how to plan, create and utilize their systems. Prevent, detect and respond to attacks through the use of hands-on labs in our exclusive Cyber Range. With this in-depth training, you will learn to develop start to finish processes for establishing your Incident Handling team, strategizing for each type of attack, recovering from attacks and much more.

National Initiative for Cybersecurity Education(NICE) Workforce Framework Categories

Choose From 4 Purchase Options

CERTIFICATION EXAM

If you believe that you have the knowledge required to pass the certification exam you may purchase the Exam Combo.  This will give you access to the online exam, an exam prep guide, and unlimited practice exams.

After you purchase the exam combo the materials will be made available for 12 months in your Mile2.com account.  If you do not already have a Mile2.com account, one will be established at the time of your purchase.

SELF-STUDY + EXAM

The Ultimate Self-Study Combo from Mile2 is a convenient self-pace learning solution for persons who need to acquire the knowledge needed to competently take the associated exam. You will receive a workbook, instructor-led videos to guide you through the workbook, the exam prep guide, unlimited practice exams and the certification exam.  The materials will be made available for 12 months in your Mile2.com account.  If you do not already have a Mile2.com account, one will be established at the time of your purchase.

LIVE TRAINING

Live-Classes from Mile2 give you the benefit of face-to-face instructors.  You can join a live class remotely via Zoom from your home or office, or contact one of our training partners to participate in a class-room based environment.  Our content matter expert instructors will guide your learning.

When you purchase the live class you will receive an electronic workbook, instructor-led videos,  and access to the live-class.  The electronic materials will be made available for 12 months in your Mile2.com account.  If you do not already have a Mile2.com account, one will be established at the time of your purchase.

LIVE CLASSES DO NOT INCLUDE AN EXAM.  THE CERTIFICATION EXAM IS PURCHASED SEPARATELY WITH THE EXAM COMBO.

RE-CERTIFICATION

All Mile2 Certifications must be renewed every 3 years.

A.  Ensure that your Mile2 Certification is Active

B. Obtain 60 CEUs (follow this link for details)

C.  Agree to the Mile2 Code of Ethics

D.  Purchase the Renewal Certification

PLEASE NOTE: If you fail to renew your certification Within Seven(7) Days of the expiration date, you may be required to purchase and re-take the certification exam (at full cost).

THE C)IHE CERTIFICATION

What it is and How it is earned

Annual Salary Potential

The holder of this certification and badge has passed the associated exam with a score of 70% or higher.

The exam covers the KSA’s provided in the NICE Framework Work Roles for Work Role ID: OV-MGT-001

Which includes, but is not limited to: 

KNOWLEDGE

  Computer Networking

  Risk Management

  Laws, regulations, policies and ethics

  Cyber Threats and Vulnerabilities

  Data Backup and Recovery

 Network Traffic Analysis Methods

  Packet-Level Analysis

  System Application Threats and more

SKILLS

   Identifying, Capturing, Containing and  reporting Malware 

   Securing Network Communications

   Security Event Correlations Tool and more

ABILITIES

  • Design Incident Response for Cloud 
  • Service Models 
  • Apply Techniques for detecting host and 
  • network-based intrusion and more

The person who carries this certification should be able to analyze an organization’s existing systems then plan and create an incident handling system that will prevent, detect, and respond to cyber attacks.

An Incident Handler should be versed in legal and ethical ramifications that come from a breech as well as possible financial loss and protected documentation loss.  Thereby they will have a start to finish processes for recovering from a variety of attacks.

Enquire Now

C)IHE

Key Course Information

Live Class Duration: 5 Days

Language: English

Class Formats:
*  Instructor-led

*  Self-Study

*  Live Virtual Training

CPEs:  40

Suggested Prior Knowledge:

*  12 months network technologies

*  Sound knowledge of networking and TCP/IP

*  Linux knowledge is essential

Applicable Exams:

*  Mile2 C)IHE

*  GCIH-GIAC 

Who Should Attend?

* Penetration Testers
* Microsoft Administrator
* Security Administrators
* Active Directory Administrators
* Anyone looking to learn more about security

C)IHE

Modules

  • Module 01: Incident Handling Explained
  • Module 02: Incident Response Policy, Plan and Procedure Creation
  • Module 03: Incident Response Team Structure
  • Module 04: Incident Response Team Services
  • Module 05: Incident Response Recommendations
  • Module 06: Preparation
  • Module 07: Detection and Analysis
  • Module 08: Containment, Eradication and Recovery
  • Module 09: Post Incident Activity
  • Module 10: Incident Handling Checklist
  • Module 11: Incident Handling Recommendations
  • Module 12: Coordination and Information Sharing

Labs

  • Lab 01: Identifying Incident Triggers
  • Lab 02: Drafting Incident Response Procedures
  • Lab 03: Identifying and Planning for Your Dependencies
  • Lab 04: Testing Your Plan and Using a Feedback Loop to Future Proof Your Response
  • Lab 05: Drafting General Security Policies
  • Lab 06: Leveraging SIEM for Advanced Analytics
  • Lab 07: Use Velociraptor and Gather Evidence Evidence
  • Lab 08: Creating Request Tracker Workflow
  • Lab 09: Lessons Learned and Documentation
  • Lab 10: Creating and Incident Handling Checklist
  • Lab 11: Drafting Incident Response Recommendations for Improvements
  • Lab 12: Sharing Agreements and Reporting Requirements

Accreditations

Course FAQ'S

Do i have to purchase a course to buy a certification exam?

No

Do all Mile2 courses map to a role-based career path?

All of our courses can be taken independently.  In order to help guide our students on their cybersecurity career journey we have developed the Mile2 Certification Roadmap.

This helpful resource maps specific courses to Role-based career tracks.

How do i access my exam?

1. Go to mile2.com/my-account

2. Select the “Courses” tab
3. Choose the course name that matches the exam you want to take

4. In the course materials, scroll to the bottom of the page to find the certifiation exam.