SERVICENOW CIS – SECURITY INCIDENT RESPONSE / SECURITY OPERATIONS – CERTIFIED COURSE

ESSENTIAL SKILLS YOU WILL DEVELOP – SERVICENOW CIS – SECURITY INCIDENT RESPONSE / SECURITY OPERATIONS

• Security Incident Response Management
• Security Incident Classification & Prioritization
• Incident Investigation & Resolution
• Security Case & Task Management
• Threat Intelligence & Indicator Management
• Vulnerability & Risk Management
• Security Workflow Configuration
• Security Automation & Orchestration
• SIEM & Security Tool Integration
• CMDB & Security Data Management
• Security Reporting & Dashboard Development
• Incident Response Troubleshooting

Tools Covered:

• ServiceNow Security Incident Response (SIR)
• ServiceNow Security Operations (SecOps)
• Vulnerability Response
• Threat Intelligence
• Configuration Management Database (CMDB)
• Security Case Management
• Flow Designer
• IntegrationHub
• Security Orchestration & Automation
• Performance Analytics

Syllabus:

MODULE 1: SECURITY OPERATIONS FUNDAMENTALS

• ServiceNow Security Operations Overview
• Security Incident Response Architecture
• SecOps Applications & Navigation
• Users, Roles & Access Controls

MODULE 2: SECURITY INCIDENT MANAGEMENT

• Security Incident Creation & Classification
• Incident Categorization & Prioritization
• Assignment, Escalation & SLA Management
• Security Incident Lifecycle

MODULE 3: INCIDENT INVESTIGATION

• Security Incident Investigation Process
• Evidence & Security Task Management
• Incident Analysis & Documentation
• Incident Resolution & Closure

MODULE 4: SECURITY RESPONSE

• Response Workflows & Procedures
• Security Response Tasks
• Containment, Eradication & Recovery
• Automated Response Actions

MODULE 5: THREAT INTELLIGENCE

• Threat Intelligence Fundamentals
• Threat Indicators & Intelligence Sources
• Indicator Enrichment & Analysis
• Threat Intelligence Integration

MODULE 6: VULNERABILITY & RISK

• Vulnerability Response Fundamentals
• Vulnerability Identification & Prioritization
• Risk Assessment & Remediation
• CMDB & Configuration Data Integration

MODULE 7: SECOPS WORKFLOWS & AUTOMATION

• Flow Designer for Security Operations
• Security Workflow Configuration
• Security Orchestration & Automation
• Automated Incident Response

MODULE 8: SECURITY INTEGRATIONS

• SIEM Integration
• Security Tool & Scanner Integration
• REST & SOAP API Integration
• IntegrationHub Configuration

MODULE 9: REPORTING & DASHBOARDS

• Security Incident Reports
• SecOps Dashboards & KPIs
• Performance Analytics
• Security Operations Monitoring

MODULE 10: CIS-SIR IMPLEMENTATION & PROJECT

• Security Incident Response Administration
• Troubleshooting & Best Practices
• SecOps Process Optimization
• Real-Time Enterprise Security Operations Implementation Project

Industry Projects:

• Enterprise Security Incident Response Implementation
• SOC Security Incident Management System
• Security Incident Classification & Prioritization
• Automated Incident Assignment & Escalation
• Security Investigation & Response Workflow
• Threat Intelligence Integration
• Vulnerability Detection & Remediation
• SIEM & Security Tool Integration
• Security Response Automation & Orchestration
• SecOps Security Dashboard & Reporting

Who is this program for?

• SOC Analysts & Security Operations Professionals
• Cybersecurity Analysts
• Security Engineers
• Incident Response Professionals
• ServiceNow Administrators & Developers
• IT Security Professionals
• Vulnerability Management Professionals
• Threat Intelligence Analysts
• IT Operations & Support Professionals
• Security Automation Professionals