CDIC: Certified DDoS Incident Commander

Demonstrate expert-level mastery of DDoS incident command. Lead war rooms, coordinate cross-team response, preserve forensic evidence, and drive blameless post-mortems.

25 Questions 85% to Pass ~25 Minutes Free

What You'll Be Tested On

The exam covers six expert-level modules of DDoS incident command.

Module 1

Incident Detection & Triage

Severity classification, impact assessment, MTTD/MTTR metrics, attack fingerprinting, false positive reduction, and initial triage procedures.

Module 2

War Room Leadership

Incident Commander role, scribe, comms lead, SME coordination, runbook design, cross-team coordination (NOC, SOC, DevOps, legal), and real-time decision-making.

Module 3

Communication & Escalation

Executive briefings, customer notifications, status page management, ISP/CDN/law enforcement escalation, communication templates, and ISAC threat intelligence sharing.

Module 4

Forensics & Evidence

Packet capture preservation, log integrity, chain of custody, GDPR breach notification, PCI incident reporting, attack attribution challenges, and regulatory reporting.

Module 5

Post-Mortem & Improvement

Blameless post-mortems, timeline reconstruction, action items, SLA impact analysis, continuous improvement processes, and metrics-driven response optimization.

Module 6

Stakeholder Management

Executive communication during incidents, customer SLA reporting, vendor coordination, insurance claim documentation, and board-level incident briefings.