AI system incidents need fast judgment, clean evidence, and controls that hold up after the first response. This course builds practical incident response skills for LLM applications, from OWASP-based classification through investigation, containment, remediation, and audit-ready reporting. It is aimed at security analysts and incident responders who need to handle cases where an AI system is either the target or the attack path, without losing evidence or clarity along the way.
The course covers OWASP Top 10 for LLM Applications 2026 triage, evidence collection for prompts, logs, RAG traces, and provider artifacts, and containment for prompt injection, data disclosure, agent abuse, supply chain compromise, and runaway consumption. It also addresses root cause writeups, remediation backlogs, governance records, post-incident detection tuning, and full case handling.