Structure the service desk and support model for security operations centres.
Building Modern Security Operations Centres Supported by Automation
An applied course in security operations centres built around the decisions practitioners actually face.
📍 Istanbul🗓️ 5 training days📚 4 modules🎓 Accredited certificate
5intensive training days
4scientific modules
8training sessions
32detailed points
Course Overview
Security and delivery speed are traded against each other in security operations centres whether or not anyone says so. Most outages involving the technology and systems delivery capability are triggered by a change somebody considered routine. Benchmarking exercises repeatedly place this aspect of technology and systems delivery among the areas with the widest performance spread. They acquire practical criteria for judging when security operations centres is working and when it is only appearing to. Each session closes with a decision the participant must justify about this part of technology and systems delivery in their own setting. It is written for people who have to make the technology and systems delivery discipline work with the resources they already have. The programme takes participants through security operations centres end to end, from framing the problem to closing it out. Teams frequently over-invest in documenting the technology and systems delivery capability and under-invest in testing it. The final module sets out how progress on the technology and systems delivery discipline will be evidenced six months later.
Expected Learning Outcomes
Build incident response for security operations centres with defined severity and escalation.
Recognise early indicators that security operations centres is drifting away from its intended design.
Define the availability, performance and recovery targets for security operations centres.
Diagnose whether a problem in security operations centres is one of design, resourcing or discipline.
Structure records of security operations centres so that they answer the questions an auditor will actually ask.
Apply access control and least privilege throughout security operations centres.
Who Should Attend
Risk managers assessing the exposure created by security operations centres.
IT governance and audit staff reviewing security operations centres.
Infrastructure and platform engineers operating security operations centres.
Information security specialists protecting security operations centres.
Compliance and governance staff whose remit includes security operations centres.
IT managers and service owners responsible for security operations centres.
Course Modules
Security operations centres: documentation, support and handover
2 sessions · 8 pointsSession 1Making releases of security operations centres routine instead of risky
- Configure alerting on security operations centres that reflects what users experience.
- Record the technical debt in security operations centres and schedule repayment.
- Collect evidence on the present handling of security operations centres before proposing changes.
- Confirm every release of security operations centres can be rolled back within a defined time.
Session 2Monitoring security operations centres from the user's point of view
- Define the trigger that would require security operations centres to be redesigned.
- Restore a backup of security operations centres in a test environment and time it.
- Define incident severity levels for security operations centres and the response each triggers.
- Confirm that contractual obligations around security operations centres are understood.
Security operations centres: backup, recovery and continuity
2 sessions · 8 pointsSession 1Documenting security operations centres so someone else can operate it
- State the availability and recovery objectives for security operations centres as numbers.
- Rehearse the briefing on security operations centres that would follow an incident.
- Set out how exceptions to security operations centres are requested and approved.
- Apply change control to security operations centres including emergency changes.
Session 2Escalation and decision rights in security operations centres
- Plan the decommissioning of the legacy component security operations centres replaces.
- Set delivery and reliability indicators for security operations centres the team trusts.
- Test the failover for security operations centres rather than assuming it works.
- Confirm the support model and escalation path for security operations centres.
Security operations centres: build, pipeline and release discipline
2 sessions · 8 pointsSession 1Comparing security operations centres with recognised practice
- Prepare the summary of security operations centres that senior management will read.
- Set the review interval for security operations centres and who attends.
- Compare the cost of security operations centres with the cost of its absence.
- Confirm data retention and deletion rules applied within security operations centres.
Session 2Setting availability and recovery targets for security operations centres honestly
- Set escalation thresholds for security operations centres that work out of hours.
- Plan the sequence in which improvements to security operations centres will be introduced.
- Review whether security operations centres is aligned with the objectives of the technical platform.
- Measure current load on security operations centres and project it forward twelve months.
Security operations centres: requirements, targets and service levels
2 sessions · 8 pointsSession 1The change to security operations centres that caused the last outage
- Anticipate the objections security operations centres will raise and prepare the answers.
- Inventory third-party dependencies inside security operations centres and their update status.
- Name a single owner for each element of security operations centres.
- Establish what evidence demonstrates security operations centres is under control.
Session 2Making security operations centres work when resources are constrained
- Assess the exit route from any cloud or vendor dependency in security operations centres.
- Confirm that reporting on security operations centres reaches the people who can act.
- Write down the assumptions underpinning the approach to security operations centres.
- Run a load test on security operations centres at expected peak plus a margin.
Choose the package that suits you
Silver Package
At least 3 people
USD1,250
- Workshop or Program Participation
- Airport Transfers
- Customized Badge
- Expert Mentorship (Private Sessions)
- Supervision & Secretarial Services
- Accredited Certificate of Participation
- Complete Training Kit
- Coffee Break
- Closing Ceremony
Gold Package
At least 3 people
USD1,850
- 5-night stay in a 5-star hotel
- Workshop or Program Participation
- Airport Transfers
- Customized Badge
- Expert Mentorship (Private Sessions)
- Supervision & Secretarial Services
- Accredited Certificate of Participation
- Complete Training Kit
- Coffee Break
- Closing Ceremony
Complete your registration
We will contact you within one business day to confirm.