SOC-Class with play/folder/grid icons

SOC-Class: Design, Build, Operate, Mature: ONLINE Nov. 9-12: 4 day - 9am-2pm

$3,000.00
$3,000.00
Skip to product information
SOC-Class with play/folder/grid icons
  • SOC-Class with play/folder/grid icons
  • Three floating transparent rectangular panels with glowing blue and purple edges, layered above a circular light effect on a dark abstract background.
  • A futuristic dark control room with three people seated at desks in front of multiple illuminated computer monitors and a large holographic world map display on the wall.
  • blue purple ochre waves
  • Security Operations Center Design, Build, Operate Gantt chart with project tasks and team members listed
  • SOC-Class Product Image
  • SOC-Class banner style with materials
  • SOC-Class cross-functional flowchart
  • SOC-Class phased roadmap
  • SOC-Class icon grid dark
  • SOC-Class with play/folder/grid icons
  • Three floating transparent rectangular panels with glowing blue and purple edges, layered above a circular light effect on a dark abstract background.
  • A futuristic dark control room with three people seated at desks in front of multiple illuminated computer monitors and a large holographic world map display on the wall.
  • blue purple ochre waves
  • Security Operations Center Design, Build, Operate Gantt chart with project tasks and team members listed
  • SOC-Class Product Image
  • SOC-Class banner style with materials
  • SOC-Class cross-functional flowchart
  • SOC-Class phased roadmap
  • SOC-Class icon grid dark
SOC-Class: Design, Build, Operate, Mature: ONLINE Nov. 9-12: 4 day - 9am-2pm

SOC-Class: Design, Build, Operate, Mature: ONLINE Nov. 9-12: 4 day - 9am-2pm

$3,000.00
$3,000.00

SOC-Class: Design, Build, Operate, Mature

Event Details

Format: Online (live, instructor-led)
Schedule: 4 consecutive days, Nov 9-12
Daily Hours: 5 hours per day: 9am - 2pm 
Time Zone: US Eastern
Delivery: Online only
Inquire for available discount codes.

Course Overview

SOC-Class: Design, Build, Operations, Maturity — your SOC. This course provides a comprehensive picture of a Cyber Security Operations Center (CSOC or SOC). Discussion on the technology needed to run a SOC is handled in a vendor-agnostic way. In addition, technology is addressed in a way that attempts to address both minimal budgets as well as budgets with global scope. Staff roles needed are enumerated. Informing and training staff through internal training and information sharing is addressed. The interaction between functional areas and data exchanged is detailed. Processes to coordinate the technology, the SOC staff, and the business are enumerated.

After attending this class, the participant will have a roadmap (and Gantt chart) for what needs to be done in the organization seeking to implement security operations.

Who Should Attend

  • SOC managers
  • Team leads in security specializations
  • Lead technical staff
  • Security architects
  • CIO, CISO, or CSO (Chief Security Officer) — the highest level appropriate to attend

Agenda

  • Class Orientation
  • Business Alignment
  • SOC Design
  • Concept of Operations (ConOps)
  • Design Considerations
  • Case Study: Phin Phiser
  • Variations of SOC Operations Program 
  • SOC Design: Analysis
  • SOC Design: Staff
  • SOC Design: Operations
  • SOC Design: Metrics
  • Maturity
  • SOC Process: SOAR (Automation and Orchestration)
  • SOC Process: AI (takers, shapers, makers)
  • Case Studies: Major Failures, Hunting Insiders

Resources & Links

You may also like

  • 5 stars: 2 (100%)
  • 4 stars: 0 (0%)
  • 3 stars: 0 (0%)
  • 2 stars: 0 (0%)
  • 1 star: 0 (0%)
D
Digit Oktavianto

I really enjoyed attending the SOC-Class by Christopher Crowley. The course was very practical and provided a clear understanding of how to design, build, operate, and mature a Security Operations Center. I especially liked that the training covered not only technology and tools, but also people, processes, metrics, and business alignment.

Crowley is very knowledgeable and explains the topics in a clear and easy to understand way, with plenty of real world examples and practical insights. The discussions and examples made the course engaging and helped connect the concepts to real SOC challenges.

Overall, it was a very valuable and worthwhile training experience. I would highly recommend SOC-Class to anyone working in cybersecurity, especially SOC managers, security leaders, architects, and professionals who are looking to build or improve their SOC capabilities.

T
Timothy Brush

I sat through the original SANS MGT517 years back and it was one of the few classes that actually changed how we ran things. The concepts stuck. We used them to tighten up our existing SOC and, more usefully, to stop sounding like we were just spending money when we talked to leadership.

This new SOC-Class from Montance is basically the same material, only Crowley kept working on it after SANS dropped the course. Four days online, 9–2 Eastern, Nov 9–12. No sales pitch for tools, no overcooked frameworks. Just a clear walk through design, staffing, day-to-day ops, metrics, maturity, and a realistic look at SOAR and where AI actually helps (or doesn’t).

The case studies on major failures and insider hunting were the parts that hit hardest for me. You walk out with a practical roadmap instead of a binder full of slides you’ll never open again. If you’re already running a SOC and feel stuck, or you’re trying to stand one up without wasting a year figuring it out the hard way, this is the one I’d point people toward. The original version paid off for us. This looks like the cleaner, current version of the same thing.