SCOR-M04
Incident Response Preparation (SCOR Module 04)
Write the detection signatures and response playbooks that run when they fire.
Legilux
303 Overwatch A.S.B.L delivers this module towards the NIS2 training duty, Article 20(2). Accredited by the Luxembourg Ministry of National Education.
Preregister at the Center of ExcellenceAs of
- Fee
- 250.00 EUR, or 150.00 EUR for Space ISAC members
- Next cohort
- On demand; the date is agreed at preregistration
Fees indicative until preregistration, from the Center of Excellence fee schedule of , checked ; modules are scheduled on demand, not on a published calendar.
Preregister at the Center of ExcellenceAbout this course
- Duration
- 1 hour live, plus one week of instructor support
- Delivery
- Online, live instructor led, evening cohorts (CET)
- Prerequisites
- None
This one-hour module is the fourth function of METEORSTORM (Multiple Environment Threat Exposure of Resources: Space Threats and Operational Risk to Missions). You write detection signatures that fire on the sources enumerated in Module 03, and the response playbooks they authorise, with approved actions across assess, contain, recover, and report, and clear assignment of who decides and who executes. This is the detect, report, and recover capability the NIS2 Directive requires, delivered inside the 24 and 72 hour reporting clocks it sets.
The session opens with a live cohort, continues through one week of asynchronous instructor support, and closes with a virtual close-out session. Each module stands alone and may be taken independently.
What is included
- One hour of live instructor led training
- Detection signatures paired with response playbooks and authorisation roles
- One week of asynchronous instructor support after the live session
- A virtual close-out session after the support week
How to enrol
Preregistration through our Center of Excellence carries no fee and collects no payment details. Modules are scheduled on demand rather than on a published calendar: we confirm the date with you, and a payment request is sent personally before anything is charged. Preregister at the Center of Excellence. The other four modules and the two full courses are listed on the portal under Training.
Jobseekers registered with ADEM may be eligible for training funding, assessed case by case.
Provider
B2710
303 Overwatch A.S.B.L is a Luxembourg non-profit association (R.C.S. Luxembourg F13274) and runs the Space Cybersecurity Operations and Resilience Platform Professional Center of Excellence (CoE). Accredited by the Luxembourg Ministry of National Education. The accreditation, as an organiser of continuing vocational training, is the ministerial act of 12 June 2026, Mémorial B2710. Questions about this module: workforce.development@303overwatch.org.
If your team should write its playbooks together
A playbook is run by whoever is on shift when its signature fires, so it is worth writing with them: the Center of Excellence delivers the module privately to a team, and a group training request is how that starts.
Talk to the Center of Excellence