Module 1: Modern Security Operations

• Business Objectives, Legal Enablers, and Considerations (Aligning SOC with Governance)

• Security Operations Team (Roles, Structure, and Collaboration Models)

Module 2: Building a Security Operations Team

• Threat Modelling (Techniques and methodologies for identifying organizational threats)

• Building Your Team (Staffing, Training, and Organizational Placement)

• SIEM & Detection Engineering (Strategic planning and selection of detection technologies)

• Case Management (Process, standardization, and tooling)

• Other Tooling & Administration (Vulnerability Scanners, Endpoint tools, etc.)

• Processes and Documentation (Playbooks, Runbooks, SOPs)

Module 3: Capability Development

• Incident Response (Building the full lifecycle capability)

• Threat Intelligence (Integration into SOC workflows and strategic decision-making)

• Vulnerability Management (Process ownership and cross-functional remediation)

• Digital Forensics (Establishing forensic readiness and collection capabilities)

• Malware Analysis (Integrating analysis output into detection)

• Threat Hunting (Establishing a hunting program and team structure)

Module 4: Metrics, Maturity, and Measuring Success

• Maturity Models (Using frameworks to assess and advance SOC capability)

• Operationalizing MITRE ATT&CK (Mapping detections and controls to adversary tactics)

• Cyber Deception (Implementing deception techniques like honeypots)

• Security Orchestration, Automation, and Response (SOAR) (Strategy and implementation)

• Reporting and Metrics (KPIs, KRIs, Executive Reporting, and Dashboards)

• Security Research & Presentation (Staying current and communicating risk to leadership)

• Retaining Talent (Strategies for team morale and skill development)