Washington State Emergency Management Division

MGT-465 Recovering from Cyber Incident

Wednesday, October 14, 2020 - Thursday, October 15, 2020

8:00 AM - 5:00 PM Daily

Course Overview

Cybersecurity has become one of the nation's most serious challenges today. However, the role of emergency managers in preventing, mitigating, and responding to a major cyber incident with physical consequences remains unclear. According to the US Department of Homeland Security's National Preparedness Report, cybersecurity is still one of the lowest rated capabilities in the State Preparedness Report—and many states have reported that they do not expect to focus on building additional capacity in this field. This is despite the fact that findings from the Federal Emergency Management Agency's National Level Exercise (NLE) 2012 Quick Look Report pinpointed many areas for improvement specific to cybersecurity that could adversely impact all levels of government.

Course Overview

The Recovering from Cybersecurity Incidents course is designed to provide guidance for the implementation of an effective cybersecurity incident recovery program. This training focuses on government, critical infrastructure, and private sector personnel who have the responsibility for recovering after a cyber incident. This course is intended to be delivered across the country to jurisdictions at all response levels: local, state, tribal, territorial, as well as private industry.

Course Goal

Upon successful completion of this course, participants will better be able to prepare for and act during the recovery of a cybersecurity incident.






Participants are recommended to have successfully completed IS-100, IS-200, and IS-700. Completion of IS-800 and IS-2900 are also recommended. These courses can be found online at:

AWR173 is also recommended and can be found at:


Target Audience

This course was developed for government and private sector IT staff for critical infrastructure, local administrators and upper-level management personnel, system administration, risk management personnel, local government administration, and emergency management personnel.


Tacoma-Pierce County EOC
2501 S 35th St Suite D
Tacoma, WA 98409

The Emergency Operations Center of Pierce County Emergency Management is located at 2501 South 35th Street, Tacoma, WA 98409. The EOC entrance is located beyond the chain-linked fence directly East of the radio tower. Ample parking is available onsite to visitors in the front and back lots.

Click here for directions

Course Manager

Natalie Stice

Pierce County DEM


To register, please click below:

Clicke here