RSA® Threat Intelligence

Overview
In the context of the current threat environment, participants learn ways to detect and correlate data for better threat analysis; reduce breach exposure time and break the cyber kill chain; and manage current and future threats. As participants progress through the program, their perceptions of threats will evolve, and they will receive instruction on the role of threat intelligence in security systems that are evolving along with the threat environment. Get to participate in hands-on and table-top exercises to practice strategies for analyzing attacks and mitigating their effects, and for applying intelligence-driven security practices in their own organizations.

Program Objective
Upon completing the program, participants should be able to:
1. Describe the current global threat ecosystem
2. Illustrate the logical components of an advanced security program
3. List best practices for planning advanced defenses
4. Describe the cyber kill chain
5. Provide examples of cyber kill chain intervention
6. Compare traditional threats and Advanced Persistent Threats
7. Find and use sources of threat intelligence
8. Perform threat modeling of high-value assets and high-value adversaries
9. Gather and analyze threat intelligence
10. Manage the threat lifecycle

Who Should Attend
• Security analysts who investigate, analyze, and resolve or escalate incidents and issues; monitor external security information sources; or feed actionable intelligence back into systems
• Novice security analysts who meet prerequisites and want to advance their skills
• SOC managers who want to implement a Threat Intelligence capability

Pre-requisites Required
• Participants who have taken the RSA intelligence-Drive Event Analysis program. Familiarity with computer architecture principles; networking concepts, and information security theory.