Skip to content

Security Operations Centre Fundamentals and Threat Monitoring

As South African firms build in house security monitoring, they need analysts who can read alerts, spot genuine threats and escalate without drowning in noise. This course grounds new and aspiring analysts in the daily work of a security operations centre, from log sources and detection rules to triage and handover. Participants practise on realistic alert scenarios that mirror local attack patterns.

What you will be able to do

  • Explain the role and workflow of a security operations centre across analyst tiers.
  • Interpret logs from firewalls, endpoints and cloud services to identify suspicious activity.
  • Triage alerts to separate false positives from genuine threats efficiently.
  • Apply detection rules and use cases aligned to common attacker techniques.
  • Document and escalate incidents with clear, actionable handover notes.
  • Measure monitoring effectiveness using practical operational metrics.

Course outline

  1. 01Purpose and Structure of a Security Operations Centre
  2. 02Log Sources and Data Collection
  3. 03Understanding Attacker Techniques
  4. 04Alert Triage and False Positive Reduction
  5. 05Detection Rules and Use Cases
  6. 06Incident Escalation and Handover
  7. 07Threat Intelligence in Daily Monitoring
  8. 08Measuring and Improving Detection

Who should attend

Junior security analysts, IT support staff moving into security, and network administrators taking on monitoring duties.

Dates, venues and fees

DatesVenueDaysFeeCalendar
17 to 21 Aug 2026Lagos5US$1,800
24 to 28 Aug 2026Harare5US$1,800
31 Aug to 4 Sep 2026Kampala5US$1,800
7 to 11 Sep 2026Dar es Salaam5US$1,800
14 to 18 Sep 2026Pretoria5R18,000
21 to 25 Sep 2026Cape Town5R18,000
5 to 9 Oct 2026Online5US$900
12 to 16 Oct 2026Mozambique5US$1,800
19 to 23 Oct 2026Cairo5US$1,800
26 to 30 Oct 2026Accra5US$1,800
2 to 6 Nov 2026Lusaka5US$1,800
9 to 13 Nov 2026Kigali5US$1,800
16 to 20 Nov 2026Nairobi5US$1,800
23 to 27 Nov 2026Durban5R18,000
30 Nov to 4 Dec 2026Johannesburg5R18,000
14 to 18 Dec 2026Mauritius5US$1,800
21 to 25 Dec 2026Dubai5US$1,800

Fees are per delegate. South African venues are priced in rand; other locations and online in US dollars. Fees exclude 15% VAT where applicable. Group bookings of three or more delegates from the same organisation qualify for a reduced rate; contact us for a quotation.

Related courses in Data, Digital and Cyber Security

Data, Digital and Cyber Security

Cyber Security Fundamentals for Business Teams

Most breaches begin with an ordinary employee making a reasonable decision on incomplete information. Cyber security is translated into...

Next session
31 Aug to 2 Sep 2026
Venue
Harare
3 day programme
FromUS$900
Data, Digital and Cyber SecurityNew

Artificial Intelligence for Business Managers

Artificial intelligence has moved from novelty to something managers are expected to have an opinion on. Non technical leaders get a...

Next session
31 Aug to 2 Sep 2026
Venue
Mauritius
3 day programme
FromUS$900
Data, Digital and Cyber Security

Data Analytics and Dashboard Reporting for Decision Makers

Organisations collect far more data than they use well. Delegates clean and structure operational data, build dashboards that answer a...

Next session
31 Aug to 4 Sep 2026
Venue
Durban
5 day programme
FromUS$900
See all Data, Digital and Cyber Security courses