ServiceNow Security Incident Response (SIR) Implementation [SNSIRI]

Total time
Location
At location
Starting date and place
Logo Global Knowledge Network Training Ltd.

Need more information? Get more details on the site of the provider.

Starting dates and places

placeVirtual - Western European Time Zone
24 Jun 2021 until 25 Jun 2021
placeVirtual - UK Time Zone
5 Aug 2021 until 6 Aug 2021
placeVirtual - Western European Time Zone
13 Sep 2021 until 14 Sep 2021

Description

OVERVIEW

Learn the domain knowledge, technical aspects, and various processes needed to effectively manage a Security Incident Response implementation (SIRI).

This two-day course covers the domain knowledge, common implementation technical aspects, and various processes needed to effectively manage a Security Incident Response implementation (SIRI).

Attendees will learn and practice various tactical skills and strategies that will better prepare them to implement Security Incident Response (SIR). Through lectures, group discussion, hands-on labs and simulations, participants build on existing knowledge and skills by applying implementation best practices.

OBJECTIVES

After you complete this c…

Read the complete description

Frequently asked questions

There are no frequently asked questions yet. If you have any more questions or need help, contact our customer service.

OVERVIEW

Learn the domain knowledge, technical aspects, and various processes needed to effectively manage a Security Incident Response implementation (SIRI).

This two-day course covers the domain knowledge, common implementation technical aspects, and various processes needed to effectively manage a Security Incident Response implementation (SIRI).

Attendees will learn and practice various tactical skills and strategies that will better prepare them to implement Security Incident Response (SIR). Through lectures, group discussion, hands-on labs and simulations, participants build on existing knowledge and skills by applying implementation best practices.

OBJECTIVES

After you complete this course you will be able to:

  • Security Incident Response Overview
  • Create Security Incidents
  • Security Incident and Threat Intelligence Integrations
  • Security Incident Response Management
  • Risk Calculations and Post Incident Response
  • Security Incident Automation
  • Data Visualization
  • Family Delta Module
  • Capstone Project

AUDIENCE

Technical Consultants and Administrators who will be configuring, developing or supporting the Security Incident Response applications, Project/Program/Engagement Managers who will be leading implementation of Security Incident Response applications in ServiceNow, Operations Managers who have oversight of work which will be facilitated using Security Incident Response applications in ServiceNow

CERTIFICATION

ServiceNow requires the completion of prerequisite training course(s) in preparation for the Certified Implementation Specialist - Security Incident Response exam (CIS-SIR) . Information provided in the following ServiceNow training course(s) contain source material for the exam.

CONTENT

Security Incident Response Overview

  • Identify the goals of Security Incident Response (SIR)
  • Discuss the importance of understanding customers and their goals, and discuss how Security Incident Response meets customer expectations

Create Security Incidents

  • Determine how to create Security Incident Response incidents: Setup Assistant, Using the Service Catalog, Manual Creation, and Via Email Parsing

Security Incident and Threat Intelligence Integrations

  • Discuss different integration capabilities
  • Describe the Three Key Security Incident Response Integrations: Custom, Platform, Store & Share.

Security Incident Response Management

  • Describe the Security Incident Response Management process and components: Assignment Options, Escalation Paths, Security Tags, Process Definitions and Selection.

Risk Calculations Post Incident Response

  • Identify Calculators and Risk Scores
  • Be able to post Incident Reviews.

Security Incident Automation

  • Discuss the Security Incident Response Automation processes available on the ServiceNow Platform: Workflows, Flow Designer, and Playbooks.

Data Visualization

  • Explain the different Security Incident Response Dashboards and Reports available in the ServiceNow platform: Data Visualization, Dashboards and Reporting, Performance Analytics.

Security Incident Response Family Release DELTA

  • Learn about the new, enhanced, and/or deprecated features of the current Security Incident Response family release.

Capstone Project

  • There is a final take-home Capstone project where participants provision a Developer instance and complete directed tasks to reinforce the concepts learned in class.
There are no reviews yet.

Share your review

Do you have experience with this course? Submit your review and help other people make the right choice. As a thank you for your effort we will donate £1.- to Stichting Edukans.

There are no frequently asked questions yet. If you have any more questions or need help, contact our customer service.