RCCE Course
Course #387

Security controls Operations Playbook: Workshop

📊 Level: Advanced
⏱️ Duration: 2 Days
🏷️ Track: Foundations
📋 Prerequisites: Foundations
🖥️ Mode: Online Instructor-Led
📝 Course Description

RCCE students will learn security control selection, implementation, and validation including preventive, detective, corrective, deterrent, and compensating controls. RCCE students will learn to map security controls to organizational risk and compliance requirements, select appropriate controls from frameworks like NIST 800-53 and CIS Controls, implement technical, administrative, and physical controls, validate control effectiveness through testing and monitoring, document control evidence for audit purposes, identify control gaps and implement compensating controls, and maintain a control catalog that evolves with changing threats and regulatory requirements. This operations-focused course delivers production-ready playbooks, checklists, and standard operating procedures. At an expert level, RCCE students will learn to build repeatable day-to-day operational workflows that ensure consistency and quality. Students receive templates and frameworks they can customize and deploy immediately in their security operations, reducing time to operational effectiveness.

🎯 Target Audience
  • Security Engineers building defensive controls
  • Security Analysts and Blue Team members
  • Systems Administrators with security responsibilities
  • GRC and Risk Professionals supporting controls
  • Professionals implementing Security controls Operations Playbook: Workshop
🧠 What You Will Learn
  • Execute hands-on tasks for security controls
  • Execute hands-on tasks for operations playbook
  • Execute hands-on tasks for workshop — advanced level
  • Explain Course Overview fundamentals
  • Execute hands-on tasks for control selection — covering controls to risk, Framework-driven.
  • Execute hands-on tasks for learning objectives
  • Execute hands-on tasks for security control taxonomy
  • Execute hands-on tasks for preventive controls — covering Block threats before impact, Firewalls, encryption, access control.
  • Execute hands-on tasks for detective controls — covering Identify incidents in progress, IDS/IPS, SIEM, log analysis.
  • Execute hands-on tasks for corrective controls — covering Restore after incidents, Patching, backup restoration.
  • Execute hands-on tasks for deterrent controls — covering Discourage threat actors, Warning banners, audit trails.
  • Execute hands-on tasks for compensating controls — covering Alternative protections, When primary control not feasible.
📚 Course Outline
Module 01Security Controls
Module 02Operations Playbook
Module 03Workshop — Advanced Level
Module 04Course Overview
Module 05Control Selection
Module 06Learning Objectives
Module 07Security Control Taxonomy
Module 08Preventive Controls
Module 09Detective Controls
Module 10Corrective Controls
Module 11Deterrent Controls
Module 12Compensating Controls
Module 13Control Categories
Module 14Technical Controls
🧪 Lab Details

All hands-on labs run on Rocheston Rose X OS. Students practice security controls operations playbook: workshop by implementing the controls discussed in class, with a focus on real-world deployment, monitoring, and validation.

  • Lab 1: Execute hands-on tasks for security controls
  • Lab 2: Execute hands-on tasks for operations playbook
  • Lab 3: Execute hands-on tasks for workshop — advanced level
  • Lab 4: Explain Course Overview fundamentals
  • Lab 5: Execute hands-on tasks for control selection
📊 Skill Level
Advanced
Beginner Intermediate Advanced Expert
Duration
2 Days
🎓
Certificate
Completion
🖥️
Lab Platform
Rose X OS
👨‍🏫
Mode of Training
Online Instructor-Led
🔥
Platform
Zelfire
🐦‍⬛
Cyber Range
Raven
📓
Study Material
CyberNotes
🏆 Certificate

Upon successful completion of this course, students will receive an official RCCE Course Completion Certificate for Security controls Operations Playbook: Workshop, verifiable through the Rocheston certification portal.

🔑 Student Access & Materials
  • Full access to all course materials and slide decks
  • Hands-on lab access on Rocheston Rose X OS environment
  • Access to Rocheston CyberNotes
  • Access to Rocheston Zelfire — EDR/XDR SIEM platform
  • Access to Rocheston Raven — online cyber range exercise platform
  • Access to Rocheston Vulnerability Vines AI