This course is designed for novice learners wanting to understand the basics of how security, orchestration, automation, and response (SOAR) are used for enterprise security. Learners will gain insight on how institutions monitor and respond to security threats.
Class Deals by MOOC List - Click here and see Coursera's Active Discounts, Deals, and Promo Codes.
To allow for a self-paced learning experience, this course is video-free. Assignments contain short explanations with images. You'll benefit from instant feedback from a variety of assessment items along the way, gently progressing from quick understanding checks (multiple choice, fill in the blank, and un-scrambling blocks of text) to small, approachable summative assessments that take minutes instead of hours.
This course is part of the Tools for Security Specialists Specialization.
What you'll learn
- Learners will discover how a security operations center helps maintain security at an organization.
- Learners will identify the roles of security orchestration, security automation, and incident response.
- Learners will define the lifecycle of a SOAR event, as well as identify the pros and cons of SOAR.
Syllabus
Security Operations Center (SOC)
Welcome to Week 1 of the SOAR for Enterprise Security course. These assignments cover the concepts of the personnel and skills of those who provide SOAR, the importance of logging and monitoring events, and the difference between SIEM and SOAR. The module ends with graded summative assessments.
Main Elements of SOAR
Welcome to Week 2 of the SOAR for Enterprise Security course. These assignments cover the concepts of security orchestration, security automation, and incident response. The module ends with graded summative assessments.
SOAR's Role in a SOC
Welcome to Week 3 of the SOAR for Enterprise Security course. These assignments cover the concepts of the SOAR event life cycle, the benefits of SOAR, and the drawbacks of SOAR. The module ends with graded summative assessments.
