Security Incident Response Implementation

Course Duration

2 Days

Audience

Employees of federal, state and local governments; and businesses working with the government.

Prerequisites

Security Operations (SECOPS) Fundamentals or equivalent ServiceNow SecOps experience is required.

Course Description

This course teaches students how to implement ServiceNow Security Incident Response (SIR). Students learn to configure security incident workflows, integrate with threat intelligence sources, automate response actions, and support a security operations center (SOC) using the ServiceNow platform.

Learning Objectives

• Configure security incident workflows and response processes in ServiceNow
• Integrate ServiceNow SIR with threat intelligence sources and external security tools
• Automate security incident response actions using workflows and playbooks
• Manage risk calculations, post-incident analysis, and closure procedures
• Visualize and analyze security incident data using dashboards and reporting