Sorry, this page is no longer available
We may earn an affiliate commission when you visit our partners.
DevSecCon

This talk will cover the fundamentals of security orchestration, automation, and response (SOAR), how it can help your organization and people, how to approach your initiative, what you should/shouldn’t automate, and how to measure SOAR success.

Read more

This talk will cover the fundamentals of security orchestration, automation, and response (SOAR), how it can help your organization and people, how to approach your initiative, what you should/shouldn’t automate, and how to measure SOAR success.

Security orchestration, automation, and response (a.k.a. SOAR) is the cool kid on the block in security right now. Implementing SOAR requires a strategic and a tactical approach in order to avoid pitfalls and ensure ongoing success. Considering why, when, and how your organization should embark on a SOAR initiative requires careful planning. Choosing the right tools and technologies, selecting the right processes, and implementing the right measurements are key to the success of many initiatives, but they are absolutely vital in the case of SOAR. The operational benefits of SOAR are many-fold, such as improving efficiency and accuracy, reducing risk, and deriving more value from your current security stack. But it does also beg the question:What does this really mean for our teams? This talk will cover the the fundamentals of SOAR, how SOAR can help your organization and your people, how to approach your SOAR initiative, what you should and shouldn’t automate, and how to measure SOAR success.

What's inside

Syllabus

Traffic lights

Read about what's good
what should give you pause
and possible dealbreakers
Explores security orchestration, automation, and response (SOAR), a leading approach in the field
Instructors from DevSecCon, a recognized authority in security
Examines how SOAR can improve efficiency, accuracy, and risk management in security operations
Provides guidance on selecting appropriate tools, processes, and metrics for SOAR implementation
Suitable for professionals in security operations, incident response, and IT management
May require some prior knowledge or experience in security concepts to fully benefit from the course

Save this course

Create your own learning path. Save this course to your list so you can find it easily later.
Save

Reviews summary

Strategic soar planning & implementation overview

According to students, this course offers a largely positive and valuable strategic overview of Security Orchestration, Automation, and Response (SOAR). Learners appreciate the instructor's ability to clearly explain complex concepts and provide a solid framework for approaching SOAR initiatives. It is particularly beneficial for understanding the "why" and "how" of planning, including crucial insights on measuring success and avoiding common pitfalls. However, some learners, especially those seeking tactical or hands-on implementation details, found the course to be too high-level and lacking in specific tool examples or practical steps. While excellent for managers and strategists, it may require additional study for security analysts and engineers.
Best for managers and strategic roles, less for technical implementers.
"I found it more strategic than tactical, which is fine, but I wished I had known that upfront."
"If you're completely new, it's okay, but as an experienced professional, I found it lacked the depth I needed."
"I think this course is good for managers, but maybe not for those of us actually doing the work."
"I highly recommend this course for security leaders and architects looking for a high-level overview."
Instructor effectively clarifies complex SOAR fundamentals and benefits.
"The instructor has a deep understanding and explains complex topics clearly. This course really clarified the 'what' and 'why' of SOAR."
"Absolutely brilliant! The points about measuring ROI and human impact were spot on and incredibly relevant."
"As a security manager, this course really helped me to articulate the value of SOAR to leadership."
"The instructor is very knowledgeable and communicates effectively, providing an excellent strategic guide for SOAR."
Provides excellent high-level strategy and planning for SOAR initiatives.
"This course is an absolute gem for anyone trying to navigate the complexities of SOAR. The instructor's insights on strategy and implementation were incredibly valuable."
"Excellent course! It really clarified the 'what' and 'why' of SOAR. This is essential for anyone starting a SOAR journey in their organization."
"As a security manager, this course gave me the perfect framework to discuss and plan our SOAR implementation."
"I found the emphasis on avoiding common pitfalls particularly useful when understanding the strategic aspects of SOAR."
Does not provide hands-on, specific technical implementation examples.
"Disappointed with the lack of technical detail. I needed practical examples, configuration steps, or even a demo of a SOAR platform."
"I was hoping for more tangible advice on specific tools or frameworks. It felt like a very long introductory lecture without much substance for practical application."
"I found some parts a bit high-level, especially regarding actual implementation steps. It felt like a long sales pitch..."
"As a hands-on person, I felt like I wasn't getting enough actionable advice from this course."

Activities

Be better prepared before your course. Deepen your understanding during and after it. Supplement your coursework and achieve mastery of the topics covered in How to Be a SOAR Winner with these activities:
Review Network Security Principles
Review basic concepts of network security, to ensure you are well-prepared to engage in more advanced security orchestration, automation, and response (SOAR) concepts.
Browse courses on Network Security
Show steps
  • Read through your notes or online resources to refresh basic network security principles.
  • Complete a few practice exercises or quizzes to test your understanding.
Follow Tutorials on SOAR Concepts
Reinforce your understanding of SOAR fundamentals by seeking out and following tutorials on the topic.
Browse courses on Security Orchestration
Show steps
  • Identify reputable online resources or platforms offering SOAR tutorials.
  • Choose tutorials that align with the specific concepts or aspects of SOAR you want to learn.
  • Follow the tutorials step-by-step, taking notes and practicing the concepts.
Explore Pluralsight's SOAR Resources
To get a solid overview of SOAR concepts, explore the resources available on Pluralsight.
Show steps
  • Watch a few videos or tutorials on SOAR.
  • Read some articles or blog posts on the topic.
Six other activities
Expand to see all activities and additional details
Show all nine activities
Join a SOAR Community or Forum
Connect with other SOAR professionals to share knowledge, ask questions, and stay up-to-date on the latest trends.
Show steps
  • Join a SOAR community or forum online.
  • Participate in discussions and ask questions.
Simulate SOAR Scenarios
Enhance your practical knowledge and decision-making abilities by simulating real-world SOAR scenarios.
Show steps
  • Identify or create a realistic security incident scenario.
  • Develop a SOAR playbook to automate the response to the scenario.
  • Simulate the scenario and run the playbook, observing its effectiveness.
  • Analyze the results and identify areas for improvement.
Gather SOAR Tools and Resources
Find and gather a collection of useful SOAR tools and resources for future reference.
Show steps
  • Compile a list of SOAR tools and resources.
  • Organize your compilation into categories or sections for easy access.
  • Describe the key features and benefits of each tool or resource.
Complete SOAR Practice Exercises
Gain practical experience by completing SOAR practice exercises and simulations.
Show steps
  • Find a set of SOAR practice exercises or simulations online or in a textbook.
  • Complete the exercises and simulations to test your skills.
  • Review the results of your exercises to identify areas for improvement.
Contribute to Open-source SOAR Projects
Gain hands-on experience and contribute to the SOAR community by participating in open-source projects.
Show steps
  • Find an open-source SOAR project that interests you.
  • Review the project's documentation and contribute to the project.
Implement a SOAR Solution
Apply your SOAR knowledge by implementing a SOAR solution for a specific problem or use case.
Show steps
  • Identify a specific problem or use case that can be addressed with a SOAR solution.
  • Design and develop a SOAR solution to address the problem.
  • Implement and test the SOAR solution.
  • Monitor and evaluate the performance of the SOAR solution.

Career center

Learners who complete How to Be a SOAR Winner will develop knowledge and skills that may be useful to these careers:
Security Manager
Security Managers oversee the security of an organization's computer networks and systems. This course, which covers the fundamentals of security orchestration, automation, and response (SOAR), may be useful for practicing Security Managers. SOAR can help streamline and automate security operations, which can improve efficiency and accuracy, reduce risk, and derive more value from an organization's current security stack.
Security Engineer
Security Engineers design, implement, and maintain security controls to protect an organization's computer networks and systems from cyberattacks. This course, which covers the fundamentals of security orchestration, automation, and response (SOAR), may be useful for practicing Security Engineers. SOAR can help streamline and automate security operations, which can improve efficiency and accuracy, reduce risk, and derive more value from an organization's current security stack.
Information Security Analyst
Information Security Analysts help protect an organization's information assets from unauthorized access, use, disclosure, disruption, modification, or destruction. This course, which covers the fundamentals of security orchestration, automation, and response (SOAR), may be useful for practicing Information Security Analysts. SOAR can help streamline and automate security operations, which can improve efficiency and accuracy, reduce risk, and derive more value from an organization's current security stack.
Penetration Tester
Penetration Testers evaluate the security of computer networks and systems by simulating cyberattacks. This course, which covers the fundamentals of security orchestration, automation, and response (SOAR), may be useful for practicing Penetration Testers. SOAR can help streamline and automate security operations, which can improve efficiency and accuracy, reduce risk, and derive more value from an organization's current security stack.
Security Auditor
Security Auditors assess the security of an organization's computer networks and systems. This course, which covers the fundamentals of security orchestration, automation, and response (SOAR), may be useful for practicing Security Auditors. SOAR can help streamline and automate security operations, which can improve efficiency and accuracy, reduce risk, and derive more value from an organization's current security stack.
Security Architect
Security Architects design and implement security architectures to protect an organization's computer networks and systems from cyberattacks. This course, which covers the fundamentals of security orchestration, automation, and response (SOAR), may be useful for practicing Security Architects. SOAR can help streamline and automate security operations, which can improve efficiency and accuracy, reduce risk, and derive more value from an organization's current security stack.
Network Security Engineer
Network Security Engineers design, implement, and maintain security controls to protect an organization's computer networks from cyberattacks. This course, which covers the fundamentals of security orchestration, automation, and response (SOAR), may be useful for practicing Network Security Engineers. SOAR can help streamline and automate security operations, which can improve efficiency and accuracy, reduce risk, and derive more value from an organization's current security stack.
Chief Information Security Officer (CISO)
The Chief Information Security Officer (CISO) is responsible for developing and implementing an organization's information security strategy. This course, which covers the fundamentals of security orchestration, automation, and response (SOAR), may be useful for aspiring CISOs. SOAR can help streamline and automate security operations, which can improve efficiency and accuracy, reduce risk, and derive more value from an organization's current security stack.
Cybersecurity Analyst
Cybersecurity Analysts help protect an organization's computer networks and systems from cyberattacks. This course, which covers the fundamentals of security orchestration, automation, and response (SOAR), may be useful for practicing Cybersecurity Analysts. SOAR can help streamline and automate security operations, which can improve efficiency and accuracy, reduce risk, and derive more value from an organization's current security stack.
Threat Intelligence Analyst
Threat Intelligence Analysts collect and analyze information about cyber threats to help organizations protect their computer networks and systems from cyberattacks. This course, which covers the fundamentals of security orchestration, automation, and response (SOAR), may be useful for practicing Threat Intelligence Analysts. SOAR can help streamline and automate security operations, which can improve efficiency and accuracy, reduce risk, and derive more value from an organization's current security stack.
Security Operations Center (SOC) Analyst
Security Operation (SOC) Analysts monitor and respond to security incidents in an organization's computer networks and systems. This course may be useful for practicing Security Operations Center (SOC) Analysts. The course covers the fundamentals of security orchestration, automation, and response (SOAR), which can help streamline and automate security operations, improve efficiency and accuracy, reduce risk, and derive more value from an organization's current security stack.
Incident Responder
Incident Responders respond to security incidents in an organization's computer networks and systems. This course, which covers the fundamentals of security orchestration, automation, and response (SOAR), may be useful for practicing Incident Responders. SOAR can help streamline and automate security operations, which can improve efficiency and accuracy, reduce risk, and derive more value from an organization's current security stack.
Security Consultant
Security Consultants help organizations protect their computer networks and systems from cyberattacks. This course, which covers the fundamentals of security orchestration, automation, and response (SOAR), may be useful for practicing Security Consultants. SOAR can help streamline and automate security operations, which can improve efficiency and accuracy, reduce risk, and derive more value from an organization's current security stack.
Compliance Officer
Compliance Officers ensure that an organization complies with applicable laws and regulations. This course, which covers the fundamentals of security orchestration, automation, and response (SOAR), may be useful for practicing Compliance Officers. SOAR can help streamline and automate security operations, which can improve efficiency and accuracy, reduce risk, and derive more value from an organization's current security stack.
Risk Manager
Risk Managers assess and manage the risks facing an organization. This course, which covers the fundamentals of security orchestration, automation, and response (SOAR), may be useful for practicing Risk Managers. SOAR can help streamline and automate security operations, which can improve efficiency and accuracy, reduce risk, and derive more value from an organization's current security stack.

Reading list

We've selected four books that we think will supplement your learning. Use these to develop background knowledge, enrich your coursework, and gain a deeper understanding of the topics covered in How to Be a SOAR Winner.
A beginner-friendly guide to SOAR that explains the basics of SOAR in a clear and concise way. It valuable resource for anyone who is new to SOAR or who wants to learn more about it in a non-technical way.
Provides a beginner-friendly introduction to SOAR. It covers the basics of SOAR, as well as how to choose and implement a SOAR solution.
Provides a basic overview of SOAR, including its benefits, challenges, and best practices. It valuable resource for anyone who is new to SOAR.
A white paper from IBM that provides guidance on how to use SOAR for compliance. It valuable resource for anyone who is responsible for compliance or who wants to learn more about how SOAR can be used to improve compliance.

Share

Help others find this course page by sharing it with your friends and followers:

Similar courses

Similar courses are unavailable at this time. Please try again later.
Our mission

OpenCourser helps millions of learners each year. People visit us to learn workspace skills, ace their exams, and nurture their curiosity.

Our extensive catalog contains over 50,000 courses and twice as many books. Browse by search, by topic, or even by career interests. We'll match you to the right resources quickly.

Find this site helpful? Tell a friend about us.

Affiliate disclosure

We're supported by our community of learners. When you purchase or subscribe to courses and programs or purchase books, we may earn a commission from our partners.

Your purchases help us maintain our catalog and keep our servers humming without ads.

Thank you for supporting OpenCourser.

© 2016 - 2025 OpenCourser