Security Intelligence Fundamentals

COURSE OUTLINE:

Description

Security intelligence is a fairly new discipline that has evolved from traditional log management and security information as well as event management solutions. This course focuses on the current IT and security landscape as well as the business and IT drivers behind a holistic IT security approach, which is a prerequisite to successfully thwart malicious attacks and the misuse of valuable enterprise assets.

Audience

Individuals who desire an overview of todayï¿½s IT security challenges

Prerequisites

An understanding of basic security fundamentals

Learning Objectives

Enterprise business and IT drivers that influence the overall IT security architecture
How a Security Intelligence solution can be used to investigate and stop advanced threats and address IT governance and regulatory compliance
The role of a centralized security intelligence solution and how it integrates with other IT enterprise security components
Functional components of a security intelligence solution based on the IBM Security QRadar SIEM solution

The Status Quo of IT Security
Security Intelligence and Operations
Designing a Security Intelligence Solution
Security Intelligence Functional Components

RELATED COURSES

Courses
Cyber Security

Palo Alto Networks: TRAPS 3.4: Install, Configure, and Manage

Palo Alto Networks Traps Advanced Endpoint Protection prevents sophisticated vulnerability exploits and unknown malware-driven attacks. Traps accomplishes this through a highly scalable, lightweight agent that uses an innovative new approach for defeating attacks without requiring any prior knowledge of the threat itself. Successful completion of this two-day, instructor-led course equips you to install traps in basic configurations.

Courses
Cyber Security

CompTIA Advanced Security Practitioner (CASP) Prep Course

You have experience in the increasingly crucial field of information security, and now you’re ready to take that experience to the next level. CompTIAï¿½ Advanced Security Practitioner (CASP) (Exam CAS-002) is the course you will need to take if your job responsibilities include securing complex enterprise environments. In this course, you will expand on your knowledge of information security to apply more advanced principles that will keep your organization safe from the many ways it can be threatened. Today’s IT climate demands individuals with demonstrable skills, and the information and activities in this course can help you develop the skill set you need to confidently perform your duties as an advanced security professional. This course is designed for IT professionals who want to acquire the technical knowledge and skills needed to conceptualize, engineer, integrate, and implement secure solutions across complex enterprise environments.

This course can also benefit you if you intend to pass the CompTIA Advanced Security Practitioner (CAS-002) certification examination. What you learn and practice in this course can be a significant part of your preparation.

Courses
Cyber Security

Securing Your Email with Cisco IronPort C-Series Part II

Who should attend Enterprise messaging managers and system administrators Email system designers and architects Network managers responsible for messaging implementation Prerequisites Attendees should possess the following background knowledge and skills: Experience configuring Cisco IronPort email security appliances through participation in the IronPort Configuration Workshop or equivalent working experience. Solid knowledge of TCP/IP fundamentals, including IP…

Courses
Cyber Security

IBM Security QRadar SIEM Administration

In this course, you will learn how to minimize the time between when suspicious activity occurs and when you detect it. There are a variety of administrative tools you can use to manage a QRadar SIEM deployment. This course covers system configuration, data source configuration, and remote networks, and services configuration.