Certified Security Operations Center (CSOC Part 2) Course

Launch your career as a well-paid SOC specialist & sharpen your capabilities to perform effective SOC management

Sign Up Now Talk To A Consultant

We have trained over 750 organizations including:

Sharpen your SOC management capabilities substantially & become industry-ready

An intensive training course with content-rich videos spread over 6 detailed modules

Acquire highly in-demand skills to analyse and detect organisational threats

Bolster knowledge with several practical sessions and downloadable learning materials

The Certified Security Operations Center (CSOC Part 2) course covers the design, deployment and operation of the SOC.

Created by deeply experienced practitioners, the course teaches you the skills to analyse and detect threats to an organisation through demonstrations, labs, and lectures.

The course covers the functional areas of Communications, Network Security Monitoring, Threat Intelligence, Incident Response, Forensics, and Self-Assessment. With all the detailed theory and intense practical training it offers, this course is unlike anything else in the market.

Benefits of the Certified Security Operations Center (CSOC Part 2) Course

  • Helps you build the ability to perform SOC responsibilities - a highly lucrative career avenue.

  • Covers all functional areas including Communications, Network Security Monitoring, Threat Intelligence, Incident Response, Forensics, and Self-Assessment.

  • An in-depth course covering fundamentals as well as advanced topics like attack methodologies, SIEM and log management. 
     

csoc 2 (1)

 

CSOC (Part 2) Course Learning Objectives:

After completing the CSOC (Part 2) course, you will be able to:  

  • Explain in your own words the basics of a Security Operations Centre, what the SOC team structure should look like and what some of the SOC best practices are.

  • Offer a detailed explanation of the fundamentals of Log Management and Log Management Infrastructure.

  • Articulate what Log Analysis Methodology is. 

  • Explain what is SIEM Architecture, Logs and Events, ArcSight and Log Baselining. 

  • Work with QRadar, its components console tab, dashboard, log activity and QRadar Assets. 

  • Fully comprehend Incident Response Best Practices and Policies, how to create an Incident Response Plan, why and how to conduct Training and Awareness, and what comprises Incident Management. 

  • Define the relationship between Incident Response, Incident Handling, and Incident Management.

Feedback and Testimonials for our Courses

The playbooks training course was a good 'part-2' to the CIPR and went into greater depth in a number of areas. The day was fun and Amar kept us moving along at a good pace.
Kevin Hayes
CISO, Cyber Risk Associates

Enjoyed the course. Good mix of attendees and plenty of lively conversation. Amar steered us through it all admirably.

Russ Smith
CISO, EOL IT

Overall the course was very good. I would strongly recommend this training to anyone who is involved in Cyber Security or has control of information assets.

Kim Rose
Information Governance Officer, Wye Valley NHS Trust

It was a great workshop with a lot of interesting people and a great learning experience.

Philipp Scheiwiler
System Engineer
This was a very helpful day and opportunity to speak with a number of operational incident responders to discuss what really works in practice and not just in theory. I gained a great deal from the day, particularly around the construction of bespoke playbooks and also a variety of useful resources to inform my learning. A really good day.
Andrew Lock
Information Security Consultant

CSOC Part 2 Course Modules 

Module 1 - SOC
  • Introduction to SoC

  • SoC Team Structure and types of SOC

  • Threats for the organisation
Module 2 - Log Analysis
  • Introduction to Log Management

  • Log Management Infrastructure

  • Log Analysis Methodology

  • Log Handling
Module 3 - SIEM
  • Introduction to SIEM 
Module 4 - QRadar
  • Introduction to QRadar

  • QRadar Components Console Tab

  • QRadar Dashboard

  • QRadar Log Activity, QRadar Network Activity, QRadar Offenses, QRadar Assets and QRadar Report
Module 5 - ArcSight
  • Introduction to ArcSight

  • ArcSight ESM
Module 6 - Incident Response
  • Introduction to Incident Response

  • Incident Response Methodology

All trademarks, service marks, trade names, product names, service names and logos appearing on the site, or on printed or digital material are the property of their respective owners, including in Cyber Management Alliance Ltd. Any rights not expressly granted herein are reserved.

What people say:
  • clear-img.png

    “I found the course to be very interesting. It not the usual bookish theoretical type, of course, it was quite interactive.."

    Sanjay Khanna

    CIO, Rak Bank, Dubai

  • clear-img.png

    “Amar Singh brings a wealth of personal experience and knowledge.”

    Hariprasad Chede

    President ISACA UAE

  • clear-img.png

    “The course was excellent. Not the typical core text book training but giving valuable insights and experiences.”                                 

    Youssef Karroum

    Head of IT, Bank of Sharjah, UAE

  • clear-img.png

    “This was the most interesting and attractive courses I have ever attended. A lot of inside knowledge was shared.”

    Saptorshi Datta

    Head of Audit, Emirate Global Aluminium, UA

  • clear-img.png

    "I wish all Senior Executives attend this course. It’s the most practical course I have ever attended. It teaches you not just how to understand but also how to respond to a Cyber Attack. ."                              

    K.S.Ramakrishn

  • clear-img.png

    "The information we learnt provoked plenty of conversation both around personal experiences with the challenges that I face in the business  and also backing up what was said in the course with real-life examples"

    Aaron Townsend

  • clear-img.png

    "The training was very informative and well knowledgable and i would recommend this course to anyone who wishes to explore cyber security even further."

    Frank Manoharan

    IT Director, Christ the King Sixth Form Colleges London

  • clear-img.png

    "It’s been a great two days of learning. We drilled down, we simplified how an incident should be detected and how an incident should be handled. One of the key learnings I have taken is define normal. ."

    Sanjoy John

  • clear-img.png

    "The overall training was good, it was quite informative. I highly recommend this training session to at least the CXO level people because it is something very meaningful for them and it can be very beneficial for organisations."

    Anuj Jain

  • clear-img.png

    "Amar is a good mentor because he did more than just teaching. The checklist and mind maps are a really good part of the course. ."

    Vimal Rama

    IT Manager, HLB HAMT, Dubai UAE

  • clear-img.png

    "Amar is an excellent tutor and mentor also. The key aspects of the training is interactive sessions. Everyone has shared their experiences. I gained much knowledge which will be useful for my day to day activities."

    BGK Vikram

  • clear-img.png

    "I really learnt a lot from this course as it was the first cyber security course I have been on. What I liked the most was the mind-mapping."

    Krishna Raghupati

    Paramount Computer Services,  Dubai UAE

  • clear-img.png

    "I recommend everyone to attend this course whether your business is at the beginning or whether you have already implemented some of the IT security procedures. Even if you think you are protected but in fact it is not protected.."

    Bir Lama
VIEW MORE
New call-to-action

Book a call to discuss or ask any questions about the course. Please don't forget to change your location first.

Building and Optimising Incident Response Playbooks

Find out more about our one day public courses or internal workshops, please complete the form below. 

  • callOr call us on:
  • +44 (0) 203 189 1422
Simply fill in your details to request a FREE callback