SOC Class

Class Orientation

• A Story About Telling Stories
• First Principles and Terminology

Business Alignment

• Steering Committee – Phase 1: Design
• Requirements
• Impact
• Charter

SOC Design

• Functional Components
• Presumed Organizational Support Functions
• Functional Arrangements
• Operational and Architectural Considerations
• SOC Organizational Position
• Multi SOC Models
• SOC and IT Relations
• Size and Maturity
• Size: What Does It Look Like?
• Outsourcing Advice

Overall Program of Operations

• Intro
• Command Center
• Network Security Monitoring
• Threat Intelligence
• Incident Response
• Forensics
• Self-Assessment

Business Alignment (2)

• Defensive Topology
• Steering Committee: Phase 2: Build

SOC Design

• Functional Area Work Products
• Technology Selection
• Physical SOC Build
• Technology Selection
• Cultural and Organizational Influence on SOC Requirements and Performance
• Orchestration and Automation

Analysis

• Analytical Methodology for the SOC
• Applied
• Available Frameworks for Analysis
• Analytical Methodology: Wrap Up

Staff

• Roles
• Hiring
• Onboarding
• Training
• Meetings
• Retention

Operations

• Tempo
• Pre-Forensics
• Threat Hunting
• Use Case Development

Metrics

• Introduction
• Appropriate Audience
• Reported
• Steering Committee: Phase 3: Operations
• Service Level Objectives
• SOC Internal Health and Performance

Maturity

• Introduction
• SOC-CMM Walkthrough

Processes

• Process list
• Sequence Walk Through

Case Study

• Phin Phisher
• Insiders
• Equifax