Security Operations

Key Details

The “Security Operations” module provides students with a comprehensive understanding of cybersecurity operations in a Security Operations Center (SOC). It covers essential topics such as threat detection, network security monitoring, incident response, and SOC workflow automation. The module includes both theoretical and practical components, enabling students to develop hands-on skills in cybersecurity analysis and defense.

Time commitment

• Total workload: 125 hrs
• Contact hours: 20 hours lectures, 10 hours practical labs
• Private study including examination preparation: 95 hours (75 self-reading / 20 hours exams preparation)

Assessment

Exams and assessment formats

• Part 1: Final Written Exam (Proctored Multiple-Choice Questionnaire, 60%) – 60 minutes. This exam will test knowledge of security operations concepts, network security, and incident response methodologies.
• Part 2 (40%): Case Study Analysis or Practical Lab Report – Students may alternatively select a real-world cybersecurity incident for analysis, demonstrating their ability to apply SOC techniques to investigate and mitigate threats.

Subjects covered

Week 1: Introduction to SOC and its role in cybersecurity.

Week 2: Network security monitoring and tools.

Week 3: Fundamentals of cryptography in cybersecurity.

Week 4: Common TCP/IP attacks and mitigation techniques.

Week 5: Endpoint security technologies and best practices.

Week 6: Incident analysis and response strategies.

Week 7: Cyber threat hunting methodologies.

Week 8: Event correlation and SIEM (Security Information and Event Management) systems.

Week 9: Investigation of security incidents using forensic techniques.

Week 10: SOC workflow automation and optimization.

Week 11: Compliance, governance, and ethical considerations in cybersecurity.

Week 12: Emerging cybersecurity challenges and future trends.

Learning objectives

Upon successful completion of this module, students will be able to:

• Understand the role and responsibilities of a SOC analyst.
• Utilize network security monitoring tools to detect and respond to cyber threats.
• Investigate and analyze security incidents using threat intelligence and data correlation techniques.
• Develop SOC workflows and implement automation strategies to enhance cybersecurity operations.