Original papers are invited on recent advances in Cyber incident response, coordination, containment and control, and including risk management, risk-based decision, prioritisation, conditionality and proportionality. The topics in Cyber Incident 2016 include but not limited to:

Cyber Incident Response

• Cyber Incident Analysis
• Cyber Incident Triage
• Cyber Incident Correlation and Assessment
• Coordination
• Containment
• Root Cause Analysis (RCA)
• Timeliness
• Handling and Handling Process
• Reporting
• Escalation
• Cyber Incident Management

Decision Control

• Decision Control
• Emergence Services
• Preparedness
• Readiness
• Analysis
• Risk Management
• Conditionality
• Proportionality
• Prioritisation
• Decision Making
• Risk-Based Decision
• Human in the Loop

Preparedness & Readiness

• Training
• Processes and Procedures
• Policy and Standards
• Emergency  Services
• Chain of Custody
• Forensic Readiness and Investigations
• Cyber Incident Notification and Announcements
• Cyber Incident Management Tool
• Standardisation
• Framework and Methodology
• Expertise, Skills, Knowledge and Resource
• Maturity Model and Goal Setting
• Certification and Accreditation
• Memberships to Cyber Incident Responders, Incident Response Organisation

Investigation Techniques

• Rule-Based Systems
• Expert Systems
• Adaptive Learning Systems
• Predictive Systems
• The use of Biometrics to aid Forensic Investigations
• Speak, audio and voice Recognition for forensics
• Correlation and cross-correlation for Incident Analysis
• Cross-Domain Analysis
• Cross-Channel Incident Analysis
• Multi-domain Analysis