Security Incident Response Implementation

This two‑day course covers the domain knowledge, common implementation technical aspects, and various processes needed to effectively manage a Security Incident Response implementation (SIRI).

Attendees will learn and practice various tactical skills and strategies that will better prepare them to implement Security Incident Response (SIR). Through lectures, group discussion, hands‑on labs and simulations, participants build on existing knowledge and skills by applying implementation best practices.

This two‑day course covers the domain knowledge, common implementation technical aspects, and various processes needed to effectively manage a Security Incident Response implementation (SIRI).

Attendees will learn and practice various tactical skills and strategies that will better prepare them to implement Security Incident Response (SIR). Through lectures, group discussion, hands‑on labs and simulations, participants build on existing knowledge and skills by applying implementation best practices.

Course topics include:

• Security Incident Response Overview
• Create Security Incidents
• Security Incident Response Management
• Post Incident Response
• Security Incident Integrations
• Automation and Standard Processes
• Data Visualization
• Capstone Project

This course is suitable for anyone who will be working on a ServiceNow implementation of the Security Incident Response applications. Examples, include:

• Technical Consultants and Administrators – who will be configuring, developing or supporting the Security Incident Response applications
• Project/Program/Engagement Managers – who will be leading implementation of Security Incident Response applications in ServiceNow
• Operations Managers – who have oversight of work which will be facilitated using Security Incident Response applications in ServiceNow

Prerequisites:

Certifications:

• Certified System Administrator Exam
• ServiceNow Certified Implementation Specialist Exam for ITSM (CIS‑ITSM)
• ITIL v3 Foundations Certified (Recommended)

Education

• ServiceNow Fundamentals
• ServiceNow Platform Implementation
• ServiceNow Security Operations Fundamentals
• ServiceNow Scripting Fundamentals
• ServiceNow System Administration Advanced (Recommended)

Further details regarding this exam, including an exam blueprint, can be found on the ServiceNow Certified Implementation Specialist ‑ Security Incident Response (CIS‑SIR) Exam Specification page. Successful candidates will be awarded a “ServiceNow Certified Implementation Specialist ‑ Security Incident Response” certificate.

To view all available courses click here to view the Course Schedule.

To register for class:

• Customers can use the follow link to access the Learning Portal http://servicenow.sabacloud.com/
• Customers with OKTA/SSO login can access the Learning Portal directly to Self Register
• Customers with no account can easily create an account
• Cancellation and rescheduling policies apply (see Terms and Conditions)

Onsite training is available, with a minimum of 5 students, through ServiceNow. The pricing is not per student but a flat fee for up to 16 participants. Please contact us at training@servicenow.com for more information and pricing details. Onsite training may also be available through ServiceNow’s Authorized Training Partners.

NOTE: Interested individuals or organizations that are NOT currently working with ServiceNow are welcome to attend the course. Just send an email to training@servicenow.com with contact info (name, company, phone, email) and the course(s)/date(s). A ServiceNow training coordinator will respond within 24‑48 hrs to request credit card information and confirm course registration.

Email: training@servicenow.com

View the Terms and Conditions