Security Operations (SecOps) Fundamentals

Security Operations Fundamentals is a two-day instructor-led course designed for professionals who configure, administer, or implement ServiceNow Security Operations applications.

The course covers the foundational topics of the full Security Operations suite, giving participants a high-level view of how ServiceNow helps organizations identify, prioritize, and remediate vulnerabilities, security incidents, and misconfigured assets. Through live lectures, system demos, hands-on lab exercises, and group discussions, participants work in their own student instance through real-world security scenarios to build practical familiarity with the platform.

Note: Successful attendance requires participation in at least 75% of dedicated class time for instructor-led sessions.

 Learners should complete the prerequisite courses listed in the ServiceNow learning path before attending this course. These include:

• ServiceNow Administration Fundamentals
• Get Started with Now Create
• ServiceNow Platform Implementation

Learners should also be familiar with the ServiceNow user interface, list management, and user, role, and group configuration. ServiceNow Fundamentals or Certified System Administrator experience can help learners succeed in this course.

• Duration: 2 days
• Format: Instructor-led training (in-person and virtual)
• Platform Support: ServiceNow platform including Security Incident Response, Security Incident Response Workspace, Vulnerability Response, Threat Intelligence, Configuration Compliance, Now Assist AI for Security Operations, and the Threat Intelligence Security Center

This course is designed for professionals working on ServiceNow Security Operations implementations or administering Security Operations applications post-implementation, including:

• Process Owners championing their process domain
• Technical Consultants and Administrators configuring, developing, or supporting Security Operations applications
• IT Project, Program, and Engagement Managers leading Security Operations implementations
• Operations Managers overseeing work facilitated through Security Operations in ServiceNow

By the end of this course, learners will be able to:

• Discover the ServiceNow Security Operations applications and the current state of security
• Walk through a typical SecOps security incident lifecycle
• Explore essential platform and security administration concepts
• Demonstrate baseline Security Incident Response lifecycle and workflow-based responses
• Partner with Now Assist AI to summarize security incidents and generate closure notes
• Configure vulnerability assessment and management response tools
• Create watch topics and explore remediation efforts
• Explore the Threat Intelligence application including threat sources, attack modes, and indicators of compromise
• View and analyze Security Operations data

After completing this course, learners can continue building their Security Operations expertise by enrolling in the Security Incident Response Implementation course, which provides the advanced configuration and implementation skills needed to deploy ServiceNow SIR in a production environment.

N/A

#1. What experience do I need before taking this course? 

Welcome to ServiceNow is the only mandatory prerequisite. However, learners who have completed ServiceNow Administration Fundamentals or hold the CSA credential and are familiar with ServiceNow navigation, list management, and user and role configuration will be best prepared for the course.

#2. What Security Operations applications are covered in this course? 

The course covers Security Incident Response, Vulnerability Response including infrastructure, application, and container vulnerability response, Threat Intelligence, Configuration Compliance, Now Assist AI for Security Operations, and the Threat Intelligence Security Center.

#3. Will I get hands-on practice during the course? 

Yes. The course follows a lecture, demo, lab, and discussion format across all five modules. Participants work in their own student instance with hands-on lab exercises and live instructor assistance throughout both days.

#4. Is there an attendance requirement for this course? 

Yes. For instructor-led sessions, participants must attend at least 75% of dedicated class time to be considered as having successfully completed the course. On-demand participants must complete all on-demand modules.