Security and delivery speed are traded against each other in security operations centres whether or not anyone says so. Most outages involving the technology and systems delivery capability are triggered by a change somebody considered routine. Benchmarking exercises repeatedly place this aspect of technology and systems delivery among the areas with the widest performance spread. They acquire practical criteria for judging when security operations centres is working and when it is only appearing to. Each session closes with a decision the participant must justify about this part of technology and systems delivery in their own setting. It is written for people who have to make the technology and systems delivery discipline work with the resources they already have. The programme takes participants through security operations centres end to end, from framing the problem to closing it out. Teams frequently over-invest in documenting the technology and systems delivery capability and under-invest in testing it. The final module sets out how progress on the technology and systems delivery discipline will be evidenced six months later.
Expected Learning Outcomes
✓
Structure the service desk and support model for security operations centres.
✓
Build incident response for security operations centres with defined severity and escalation.
✓
Recognise early indicators that security operations centres is drifting away from its intended design.
✓
Define the availability, performance and recovery targets for security operations centres.
✓
Diagnose whether a problem in security operations centres is one of design, resourcing or discipline.
✓
Structure records of security operations centres so that they answer the questions an auditor will actually ask.
✓
Apply access control and least privilege throughout security operations centres.
Who Should Attend
✓
Risk managers assessing the exposure created by security operations centres.
✓
IT governance and audit staff reviewing security operations centres.
✓
Infrastructure and platform engineers operating security operations centres.
✓
Information security specialists protecting security operations centres.
✓
Compliance and governance staff whose remit includes security operations centres.
✓
IT managers and service owners responsible for security operations centres.
Course Modules
Open any module to see its sessions and topics.
01
Security operations centres: documentation, support and handover
2 sessions · 8 points
Session 1Making releases of security operations centres routine instead of risky
Configure alerting on security operations centres that reflects what users experience.
Record the technical debt in security operations centres and schedule repayment.
Collect evidence on the present handling of security operations centres before proposing changes.
Confirm every release of security operations centres can be rolled back within a defined time.
Session 2Monitoring security operations centres from the user's point of view
Define the trigger that would require security operations centres to be redesigned.
Restore a backup of security operations centres in a test environment and time it.
Define incident severity levels for security operations centres and the response each triggers.
Confirm that contractual obligations around security operations centres are understood.
02
Security operations centres: backup, recovery and continuity
2 sessions · 8 points
Session 1Documenting security operations centres so someone else can operate it
State the availability and recovery objectives for security operations centres as numbers.
Rehearse the briefing on security operations centres that would follow an incident.
Set out how exceptions to security operations centres are requested and approved.
Apply change control to security operations centres including emergency changes.
Session 2Escalation and decision rights in security operations centres
Plan the decommissioning of the legacy component security operations centres replaces.
Set delivery and reliability indicators for security operations centres the team trusts.
Test the failover for security operations centres rather than assuming it works.
Confirm the support model and escalation path for security operations centres.
03
Security operations centres: build, pipeline and release discipline
2 sessions · 8 points
Session 1Comparing security operations centres with recognised practice
Prepare the summary of security operations centres that senior management will read.
Set the review interval for security operations centres and who attends.
Compare the cost of security operations centres with the cost of its absence.
Confirm data retention and deletion rules applied within security operations centres.
Session 2Setting availability and recovery targets for security operations centres honestly
Set escalation thresholds for security operations centres that work out of hours.
Plan the sequence in which improvements to security operations centres will be introduced.
Review whether security operations centres is aligned with the objectives of the technical platform.
Measure current load on security operations centres and project it forward twelve months.
04
Security operations centres: requirements, targets and service levels
2 sessions · 8 points
Session 1The change to security operations centres that caused the last outage
Anticipate the objections security operations centres will raise and prepare the answers.
Inventory third-party dependencies inside security operations centres and their update status.
Name a single owner for each element of security operations centres.
Establish what evidence demonstrates security operations centres is under control.
Session 2Making security operations centres work when resources are constrained
Assess the exit route from any cloud or vendor dependency in security operations centres.
Confirm that reporting on security operations centres reaches the people who can act.
Write down the assumptions underpinning the approach to security operations centres.
Run a load test on security operations centres at expected peak plus a margin.
Choose the package that suits you
Silver Package
At least 3 people
USD1,250
Workshop or Program Participation
Airport Transfers
Customized Badge
Expert Mentorship (Private Sessions)
Supervision & Secretarial Services
Accredited Certificate of Participation
Complete Training Kit
Coffee Break
Closing Ceremony
Gold Package
At least 3 people
USD1,850
5-night stay in a 5-star hotel
Workshop or Program Participation
Airport Transfers
Customized Badge
Expert Mentorship (Private Sessions)
Supervision & Secretarial Services
Accredited Certificate of Participation
Complete Training Kit
Coffee Break
Closing Ceremony
Complete your registration
We will contact you within one business day to confirm.
