Security Operations Center SOC Aufbau 1

Security Operations Centers are facing a key-role in detecting and fighting cyberattacks. Due to the interaction between complex technology, processes and people, a targeted approach in setting-up and operating a SOC is key to gain detection and reaction capabilities. This training is the second part of three trainings for SOC personnel. This training includes the following topics: - Planning and implementing SOC capabilities - Optimizing SIEM architecture and rules - Priorization of security-related events - Implementing and maintenance of Playbooks - SIEM-reporting - Escalation of security-relevant events - Interacting with 2nd and third parties - Documentation requirements overview - Management of internal and external SOC audits The training will be conducted thru classroom training and discussions, as well as fighting jointly in a team against advanced hacker attacks in a virtual arena.