QA Pro AcademyCybersecurity A-Z
Join free
← Back to catalogue
Programme FIREBREAK at Brackmoor Group: a credential compromise of the shared identity system took 31 hours to contain, 29 of them spent deciding who could disable accounts, isolate plants or cut the shared ERP link, and three regulators heard three stories; a hub of shared identity and ERP with eight regional operating companies, each spoke carrying a pre-authorised containment switch; and decision times falling from up to 22 hours to about two in every region, with incidents contained within target rising from 23% to 91% against the Board's 90% target before the Board decides on 12 May 2027.
CY-PRO-063Pro Level · Incident Management

Multi-Region Incident Containment Governance

Stop a multi-region incident spreading — without stopping the business.

40 hours12 chapters60 lessons433 activities12 labs

What you'll learn

  • Measure containment honestly — separating the time spent deciding from the time spent doing — and trace delays to missing authority, missing pre-authorisation and missing legal clearance.
  • Build containment governance across jurisdictions: an action catalogue, decision rights with deputies, pre-authorised actions, a legal and notification constraint register, shared-service playbooks and a trade-off standard that keeps the business running.
  • Prove the arrangements under pressure and over time — decision exercises, no-notice drills, contractual third-party clauses and kill switches, and key risk indicators assured across three lines.
  • Price containment governance at the margin, set appetite and accept residuals explicitly, and win a single resolution the Board, internal audit and the regulators can test.

Price:৳15,000
Sign in to get access

Sign in to enrol — you can pay by bKash or Nagad, or apply a promo code.