The Course aims to make Defence Department personnel destined to operate in the Cyber Defence field learn the useful notions to acquire and preserve, in compliance with the laws in force and according to the best practices in the field, the evidence of offensive or adversary intelligence actions, or in general of an unforeseen event, reconstructed within the laboratory. The Course will provide skills on the following topics: management and organization of a system against cyber incidents, cyber incident identification, chain of custody, identification of active and hostile actors, forensic copying of system status, freezing of system status, data detection techniques, international standards and best practices.

degree obtained under the previous system or equivalent degrees in the classes: L08 - class of degrees in information engineering L31 - class of degrees in computer science and technology OR: secondary school diploma or degree in any class associated educational curriculum that demonstrates adequate propaedeutic computer skills to take the Course. Non-secondary school graduates may also be admitted as auditors who, while not possessing a school degree, have adequate prerequisite computer skills to take the Course.