Security Command Center: Identify and Prioritize Risks Course

Lesson 1 • Key Concepts: Assets, Findings, and Sources

Defines the three foundational data objects used throughout the platform. Precise understanding of these terms prevents misinterpretation in later risk analysis.

Lesson 2 • Access Control and Permission Models

Covers role-based access, permission scopes, and organisational hierarchy. Students configure appropriate access before performing any risk identification tasks.

Lesson 3 • Security Command Centre Architecture

Explains platform components, data flows, and integration points. Students map how assets, findings, and sources connect within the system.

Lesson 4 • Navigating the Platform Interface

Guides hands-on exploration of dashboards, menus, and panels. Students build navigation fluency needed for all subsequent practical exercises.

Lesson 1 • Automated Asset Discovery Methods

Explains how the platform continuously discovers cloud and on-premises assets. Students configure discovery settings to ensure full coverage across environments.

Lesson 2 • Asset Inventory Queries and Filters

Develops query skills to extract precise asset subsets from the inventory. Students write filters that support the finding correlation work introduced next.

Lesson 3 • Maintaining Inventory Accuracy Over Time

Addresses drift, stale records, and reconciliation processes. Students implement review cycles that keep the inventory reliable for ongoing risk assessments.

Lesson 1 • Built-in Security Sources and Detectors

Surveys native detectors covering misconfigurations, vulnerabilities, and threats. Students understand what each source monitors so they can assess finding credibility.

Lesson 2 • Integrating Third-Party Security Sources

Explains how external tools publish findings into the platform. Students configure integrations so all relevant signals appear in a single pane of glass.

Lesson 3 • Filtering and Searching Findings Effectively

Builds advanced query skills specific to the findings dataset. Students construct searches that isolate high-value findings for the prioritisation chapters ahead.

Lesson 4 • Recognising False Positives and Noise

Teaches techniques to identify inaccurate or irrelevant findings. Reducing noise improves prioritisation accuracy and analyst efficiency in subsequent workflows.

Lesson 1 • Identifying Misconfiguration Risks

Focuses on detecting insecure configurations across compute, storage, and networking. Students use platform detectors to surface and document misconfiguration findings.

Lesson 2 • Risk Identification Frameworks and Methodology

Introduces structured risk identification approaches applicable to cloud contexts. Students select and apply a methodology that guides all subsequent identification work.

Lesson 3 • Identifying Vulnerability Risks

Covers software and infrastructure vulnerability discovery within the platform. Students correlate vulnerability findings with affected assets to build a complete picture.

Lesson 4 • Identifying Threat and Anomaly Risks

Addresses active threat indicators and behavioural anomalies surfaced by detectors. Students distinguish opportunistic threats from targeted attack patterns.

Lesson 1 • Asset Criticality and Business Context

Teaches how asset value and business context modify raw risk scores. Students weight findings by the criticality of the affected asset to reflect true exposure.

Lesson 2 • Custom Risk Scoring Models

Guides students in building organization-specific scoring rules within the platform. Custom models align risk scores with unique threat profiles and business priorities.

Lesson 3 • Platform-Native Severity and Risk Scores

Explains how the platform calculates built-in severity and risk scores. Students interpret these scores accurately before applying any custom adjustments.

Lesson 4 • Communicating Severity to Stakeholders

Translates technical scores into business-relevant language for non-technical audiences. Students produce severity summaries that drive informed executive decisions.

Lesson 1 • Balancing Risk Reduction and Operational Constraints

Addresses trade-offs between ideal prioritisation and real-world resource limits. Students apply constraint-aware decision-making to produce achievable remediation plans.

Lesson 2 • Designing Prioritisation Workflows

Builds repeatable, documented workflows for triaging and assigning prioritised findings. Students create workflows that integrate with ticketing and remediation systems.

Lesson 3 • Exploitability and Threat Intelligence Integration

Incorporates real-world exploitability data and threat intelligence into prioritisation. Students elevate findings with active exploitation evidence above theoretical risks.

Lesson 4 • Prioritisation Frameworks and Models

Surveys established prioritisation models including risk matrices and scoring grids. Students select and adapt a framework suited to their organisational context.

Lesson 1 • Monitoring Compliance Posture Continuously

Establishes continuous compliance monitoring using platform dashboards and alerts. Students configure posture tracking that surfaces drift before it becomes an audit issue.

Lesson 2 • Mapping Findings to Control Requirements

Teaches how to link security findings to specific control objectives. Students produce traceability matrices that demonstrate control coverage to auditors.

Lesson 3 • Generating Compliance Reports and Evidence

Covers report generation, evidence packaging, and audit artifact creation. Students produce documentation that satisfies auditor requests without manual data gathering.

Lesson 4 • Remediating Compliance Gaps Systematically

Guides prioritisation and remediation of compliance-specific findings. Students close gaps using structured plans that maintain posture between audit cycles.

Lesson 1 • Continuous Improvement and Program Maturity

Applies retrospective analysis and maturity models to evolve the risk program. Students implement feedback loops that drive measurable improvement in posture over time.

Lesson 2 • Cross-Team Collaboration and Escalation

Designs collaboration models between security, engineering, and business teams. Students establish escalation paths that ensure critical risks receive timely executive attention.

Lesson 3 • Key Risk Indicators and Security Metrics

Establishes measurable indicators that track risk posture over time. Students select and instrument metrics that demonstrate program effectiveness to leadership.

Lesson 4 • Building a Risk Management Program

Defines the components of a mature, platform-supported risk management program. Students design a program structure that sustains ongoing risk identification and prioritisation.