Security / Technical Security

Security Intelligence Fundamentals

Security Intelligence is a fairly new discipline for organizations of all sizes, having evolved from traditional log management and security information and event management solutions. This course focuses on the current IT and security landscape, as well as the business and IT factors behind a holistic approach to IT security, which is a prerequisite for successfully preventing malicious attacks and misuse of valuable enterprise assets.

Issues

Identify enterprise business and IT factors affecting the overall IT security architecture.
Explain how the Security Intelligence solution can be used to investigate and stop advanced threats and address IT governance and compliance issues.
Define the role of a centralized Security Intelligence solution and how it integrates with other enterprise IT security components.
To describe the functional components of a Security Intelligence solution based on IBM Security QRadar SIEM.

Who is this training for?

This course is designed for university faculty and their students to learn about todays IT security challenges and how to use a properly designed Security Intelligence solution to protect an organizations valuable assets

Prerequisites

Before taking the course, students should thoroughly familiarize themselves with the basic security issues presented in the Security Foundation course materials, which are available on the Cyber Security Specialist portal http://www.ibm.biz/meauniversity

Training program

IT security status quo — current threat landscape, attack evolution, APTs, insider threats, breach costs
Business and IT drivers — compliance, regulations, governance, impact on organizational security architecture
Evolution from log management to Security Intelligence — SIEM, event correlation, behavioral analysis, threat intelligence
Security Intelligence concept — holistic approach to IT security, integrating data from multiple sources
Security Operations — Security Operations Center (SOC), roles, processes, incident response workflow
Exercises: threat scenario analysis, identifying business drivers affecting security architecture

Designing a Security Intelligence solution — requirements, architecture, integration with existing security infrastructure
Using SI for advanced threat detection — correlation, anomaly analysis, alert prioritization
SI and IT management and compliance — auditing, reporting, compliance frameworks
Centralized SI solution — role of the central platform and integration with security components (firewall, IDS/IPS, endpoint)
Functional components of IBM Security QRadar SIEM — architecture, modules (Log Manager, Flow Collector, Event Processor), dashboard
Exercises: designing an SI solution for an organizational scenario, QRadar SIEM component overview

Delivery Methods

Online

Convenience of participating from anywhere
Interactive live sessions with trainer
Materials available for 30 days
No travel costs

On-site

Direct contact with trainer and group
Intensive hands-on workshops
Networking with other participants
Full focus on learning

Frequently asked questions

What are the prerequisites for this training?

For Security Intelligence Fundamentals we recommend: Before taking the course, students should thoroughly familiarize themselves with the basic security issues presented in the Security Foundation course materials, which are available on the Cyber Security Specialist portal http://www.ibm.biz/meauniversity.

What is the format and duration of this training?

The training lasts 2 days and is available in online and on-site format. Sessions run from 9:00 AM to 4:00 PM. We can also customize the schedule to fit your team's needs.

Who is this training designed for?

This training is designed for: This course is designed for university faculty and their students to learn about today's IT security challenges and how to use a properly designed Security Intelligence solution to protect an organization's valuable assets.