{"product_id":"servicenow-security-incident-response-implementation-siri-syllabus","title":"ServiceNow Security Incident Response Implementation (SIRI) Syllabus","description":"\u003cdiv\u003e\u003cp\u003eThis two-day interactive course prepares implementers to configure and deploy the ServiceNow Security Incident Response (SIR) application. Participants learn how to manage the full lifecycle of security incidents, configure workflows, dashboards, and integrations, and apply Zurich release best practices to improve incident response speed, consistency, and visibility.\u003c\/p\u003e\u003c\/div\u003e\u003cdiv\u003e\n\u003ch3\u003eServiceNow Security Incident Response Implementation (SIRI) Syllabus Benefits\u003c\/h3\u003e\n\u003cul\u003e\u003cli\u003e\n\u003cp\u003e\u003cb\u003eAudience \u0026amp; Prerequisites\u003c\/b\u003e\u003c\/p\u003e\n\u003cp\u003e\u003cb\u003eWho Should Attend:\u003c\/b\u003e Process owners, technical consultants, ServiceNow administrators, project or engagement managers, and operations managers responsible for implementing or supporting Security Incident Response in ServiceNow.\u003cbr\u003e\u003cb\u003ePrerequisites:\u003c\/b\u003e Welcome to ServiceNow; ServiceNow Administration Fundamentals; Get Started with Now Create; ServiceNow Platform Implementation; Security Operations Fundamentals. Certified System Administrator (CSA) is strongly recommended. Experience with ServiceNow scripting, integrations, and development is helpful.\u003c\/p\u003e\n\u003cp\u003e\u003cb\u003eCertification \u0026amp; Exam Information\u003c\/b\u003e\u003c\/p\u003e\n\u003cp\u003eThis course includes an exam voucher. Certification details and eligibility are governed by ServiceNow Security Operations certification guidance.\u003c\/p\u003e\n\u003c\/li\u003e\u003c\/ul\u003e\n\u003c\/div\u003e\u003cdiv\u003e\u003ch3\u003eServiceNow Security Incident Response Training Outline\u003c\/h3\u003e\u003c\/div\u003e\u003cdiv\u003e\n\u003ch4\u003eLearning Objectives\u003c\/h4\u003e\n\u003cp\u003e\u003cb\u003eDay 1\u003c\/b\u003e\u003c\/p\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cb\u003eModule 1: Security Incident Response Overview and Data Visualization\u003c\/b\u003e\u003cbr\u003e\u003cb\u003eObjectives:\u003c\/b\u003e Identify goals of Security Incident Response; explain how SIR meets customer expectations; review dashboards, reports, and core components.\u003cbr\u003e\u003cb\u003eLabs:\u003c\/b\u003e Lab 1.1.1 Initial Application Setup.\u003c\/li\u003e\n\u003cli\u003e\n\u003cb\u003eModule 2: Security Incident Form and Field Configuration\u003c\/b\u003e\u003cbr\u003e\u003cb\u003eObjectives:\u003c\/b\u003e Configure security incident forms; review record lifecycle; configure risk calculations and security tags.\u003cbr\u003e\u003cb\u003eLabs:\u003c\/b\u003e Lab 2.1.1 Security Incident Response Workspace; Lab 2.2.1 Security Incident Process Selection; Lab 2.3.1 Security Incident Calculator Groups; Lab 2.4.1 Configuring Security Tags.\u003c\/li\u003e\n\u003cli\u003e\n\u003cb\u003eModule 3: Incident Generation Configuration\u003c\/b\u003e\u003cbr\u003e\u003cb\u003eObjectives:\u003c\/b\u003e Configure service catalog entries; configure email parsing; configure user-reported phishing; review integrations.\u003cbr\u003e\u003cb\u003eLabs:\u003c\/b\u003e Lab 3.2.1 Configure Email Parsing; Lab 3.3.1 Use Case: User Reported Phishing.\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003cp\u003e\u003cb\u003eDay 2\u003c\/b\u003e\u003c\/p\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cb\u003eModule 4: Playbook Configuration – Advanced Configuration\u003c\/b\u003e\u003cbr\u003e\u003cb\u003eObjectives:\u003c\/b\u003e Configure playbooks and runbooks; configure post-incident reviews; review Now Assist for SecOps.\u003cbr\u003e\u003cb\u003eLabs:\u003c\/b\u003e Lab 4.1.1 Configure Security Incident Playbooks; Lab 4.3.1 Post Incident Reviews.\u003c\/li\u003e\n\u003cli\u003e\n\u003cb\u003eModule 5: Threat Intelligence Configuration\u003c\/b\u003e\u003cbr\u003e\u003cb\u003eObjectives:\u003c\/b\u003e Review threat intelligence concepts; configure and use the MITRE ATT\u0026amp;CK framework.\u003cbr\u003e\u003cb\u003eLabs:\u003c\/b\u003e Lab 5.2.1 Leverage the MITRE ATT\u0026amp;CK Framework.\u003c\/li\u003e\n\u003cli\u003e\n\u003cb\u003eModule 6: Integrations Supporting Security Incident Response\u003c\/b\u003e\u003cbr\u003e\u003cb\u003eObjectives:\u003c\/b\u003e Review ServiceNow Store integrations; explore integration use cases; review capability framework; create custom integrations.\u003cbr\u003e\u003cb\u003eLabs:\u003c\/b\u003e Lab 6.3.1 Integrations and Capabilities.\u003c\/li\u003e\n\u003cli\u003e\n\u003cb\u003eModule 7: Supporting Security Operations Applications\u003c\/b\u003e\u003cbr\u003e\u003cb\u003eObjectives:\u003c\/b\u003e Configure Major Security Incident Management; explore Threat Intelligence Security Center; review Data Loss Prevention application.\u003cbr\u003e\u003cb\u003eLabs:\u003c\/b\u003e Lab 7.2.1 Configuring Major Security Incident Response.\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003c\/div\u003e","brand":"ServiceNOW","offers":[{"title":"266C99US \/ 2026-06-29T09:00:00 \/ Online","offer_id":45707855855777,"sku":"US-2536-IL","price":0.0,"currency_code":"USD","in_stock":true}],"url":"https:\/\/ltree-wmata-dev.myshopify.com\/products\/servicenow-security-incident-response-implementation-siri-syllabus","provider":"Learning Tree International","version":"1.0","type":"link"}