ITSC 405 - Data & Network Security Intelligence

Description
In this course, you’ll explore key topics in security information and event management (SIEM) solutions, including how to implement a SIEM solution to improve an organization’s security. You’ll configure and normalize log sources for data collection, use filtering and query languages, and monitor and analyze security event alerts generated by a SIEM solution. You’ll also apply incident response processes and best practices, generate security reports, and examine cyber security forensics and incident handling. This course also covers the processes and areas in internal and external security operations centres (SOCs) and how SIEM can be incorporated into a DevSecOps organizational environment.

3 Credits

Time Guidelines
The standard instructional time for this course is 45 hours.

Corequisites

ITSC 406