ServiceNow Security Incident Response Implementation (SIRI)

Length 2 days

Course overview

View dates &
book now

Why study this course

This two-day course covers Security Incident Response essentials such as what Security Incident Response is, why customers need Security Incident Response, and how to properly implement Security Incident Response.

Learn the common technical aspects of a ServiceNow Security Incident Response implementation as well as experience various processes to effectively manage a Security Incident Response implementation. Additionally, attendees will learn tactical skills and strategies which will better prepare them to implement Security Incident Response in a scalable, repeatable, and efficient manner.

Aligns to certification

Certified Implementation Specialist: Security Incident Response (CIS-SIR)

Request Course Information

What you’ll learn

Upon completion of this course, students will be able to:

Identify the goals of Security Incident Response
Configure SIR components:
- Forms and workspaces
- Playbooks and Runbooks
- Enrichment rules
- Security Incident Catalog
- Email Parser
- User Reported Phishing
- Post Incident Review
Examine integrations and setup options:
- Incident ingestion options
- Leverage the Capability Framework
- Enrichment options
- MITRE-ATT&CK
- Custom developed integrations
Configure Major Security Incident Management
Overview of the DLP-IR Application

ServiceNow at Lumify Work

ServiceNow's cloud-based platform and solutions help digitise and unify organisations so that they can find smarter, faster, better ways to make work flow. So employees and customers can be more connected, more innovative, and more agile. The world works with ServiceNow™.
Lumify Work is an Authorised Partner for ServiceNow.

View all ServiceNow at Lumify Work courses

Who is the course for?

Anyone wanting to learn about Security Incident Response essentials and how to configure the ServiceNow Security Incident Response application.

Course subjects

Security Incident Response Overview and Data Visualisation
Security Incident Creation and Threat Intelligence
Security Incident and Threat Intelligence Integrations
Security Incident Response Management
Risk Calculations and Post Incident Response
Automation and Standard Processes

Prerequisites

Attendees must have completed the following:

THIRD PARTY REGISTRATION

Lumify Work offers certification and training through our partnership with ServiceNow. This arrangement requires Lumify Work to provide your details to ServiceNow for course and/or exam registration purposes.

Terms & Conditions

The supply of this course by Lumify Work is governed by the booking terms and conditions. Please read the terms and conditions carefully before enrolling in this course, as enrolment in the course is conditional on acceptance of these terms and conditions.