SOC-Class: Design, Build, Operate, Mature: ONLINE January 11-15: 5 day - 5:30 - 9:30pm (US Eastern)
SOC-Class: Design, Build, Operate, Mature
Event Details
Format: Online (live, instructor-led)
Schedule: 5 consecutive Evenings, January 11-15
Daily Hours: 4 hours per day: 5:30pm - 9:30pm
Time Zone: US Eastern
Delivery: Online only
Inquire for available discount codes.
This instance should work well for Australia, Oceania, and some parts of Asia.
Course Overview
SOC-Class: Design, Build, Operations, Maturity — your SOC. This course provides a comprehensive picture of a Cyber Security Operations Center (CSOC or SOC). Discussion on the technology needed to run a SOC is handled in a vendor-agnostic way. In addition, technology is addressed in a way that attempts to address both minimal budgets as well as budgets with global scope. Staff roles needed are enumerated. Informing and training staff through internal training and information sharing is addressed. The interaction between functional areas and data exchanged is detailed. Processes to coordinate the technology, the SOC staff, and the business are enumerated.
After attending this class, the participant will have a roadmap (and Gantt chart) for what needs to be done in the organization seeking to implement security operations.
Who Should Attend
- SOC managers
- Team leads in security specializations
- Lead technical staff
- Security architects
- CIO, CISO, or CSO (Chief Security Officer) — the highest level appropriate to attend
Agenda
- Class Orientation
- Business Alignment
- SOC Design
- Concept of Operations (ConOps)
- Design Considerations
- Case Study: Phin Phiser
- Variations of SOC Operations Program
- SOC Design: Analysis
- SOC Design: Staff
- SOC Design: Operations
- SOC Design: Metrics
- Maturity
- SOC Process: SOAR (Automation and Orchestration)
- SOC Process: AI (takers, shapers, makers)
- Case Studies: Major Failures, Hunting Insiders