Examines the many roles, capabilities, organizations, and objectives involved in security incident handling and management. Core course content includes three major components: learning about the skill sets that people use, participating in role playing exercises that increasingly build upon this knowledge, and finally conducting exercises in a lab environment simulating security incident discovery, handling, and management.