Skip to content

Security Operations Centre Fundamentals and Threat Monitoring

As South African firms build in house security monitoring, they need analysts who can read alerts, spot genuine threats and escalate without drowning in noise. This course grounds new and aspiring analysts in the daily work of a security operations centre, from log sources and detection rules to triage and handover. Participants practise on realistic alert scenarios that mirror local attack patterns.

Ready to book? Secure your place on this programme.

Register for this course

What you will be able to do

  • Explain the role and workflow of a security operations centre across analyst tiers.
  • Interpret logs from firewalls, endpoints and cloud services to identify suspicious activity.
  • Triage alerts to separate false positives from genuine threats efficiently.
  • Apply detection rules and use cases aligned to common attacker techniques.
  • Document and escalate incidents with clear, actionable handover notes.
  • Measure monitoring effectiveness using practical operational metrics.

Course outline

  1. 01Purpose and Structure of a Security Operations Centre
  2. 02Log Sources and Data Collection
  3. 03Understanding Attacker Techniques
  4. 04Alert Triage and False Positive Reduction
  5. 05Detection Rules and Use Cases
  6. 06Incident Escalation and Handover
  7. 07Threat Intelligence in Daily Monitoring
  8. 08Measuring and Improving Detection

Who should attend

Junior security analysts, IT support staff moving into security, and network administrators taking on monitoring duties.

Dates, venues and fees

DatesVenueDaysFeeCalendarRegister
28 Sep to 2 Oct 2026Dubai5US$1,800Closed
5 to 9 Oct 2026Johannesburg5R18,000Register
12 to 16 Oct 2026Cape Town5R18,000Register
19 to 23 Oct 2026Durban5R18,000Register
26 to 30 Oct 2026Pretoria5R18,000Register
2 to 6 Nov 2026Nairobi5US$1,800Register
9 to 13 Nov 2026Dar es Salaam5US$1,800Register
16 to 20 Nov 2026Lusaka5US$1,800Register
23 to 27 Nov 2026Harare5US$1,800Register
30 Nov to 4 Dec 2026Accra5US$1,800Register
7 to 11 Dec 2026Lagos5US$1,800Register

Fees are per delegate. South African venues are priced in rand; other locations and online in US dollars. Fees exclude 15% VAT where applicable. Group bookings of three or more delegates from the same organisation qualify for a reduced rate; contact us for a quotation.

Related courses in Data, Digital and Cyber Security

Data, Digital and Cyber Security

Cyber Security Fundamentals for Business Teams

Most breaches begin with an ordinary employee making a reasonable decision on incomplete information.

Next session
29 Sep to 1 Oct 2026
Venue
Mbabane
3 day programme
FromR13,000
Data, Digital and Cyber SecurityNew

Artificial Intelligence for Business Managers

Artificial intelligence has moved from novelty to something managers are expected to have an opinion on.

Next session
29 Sep to 1 Oct 2026
Venue
Maseru
3 day programme
FromR13,000
See all Data, Digital and Cyber Security courses