Advanced

Certified Security Operations Manager (CSOM)

Lessons available in 9 languages with native text-to-speech (beta)

CSOM develops the skills needed to lead, build and develop security operations functions. It focuses on the processes, structure, and decision-making required to run effective SOC and incident response teams.

 

Supporting individuals to strengthen leadership capability and develop more consistent, measurable security operations across teams.

Skills Your Team Will Gain

Autopsy
Sigma
TheHive
Wazuh
MISP
OpenVAS
SOC Capability Maturity Model (SOC-CMM)
CTI-MAS
4CERT
SOC Operating Models
Maturity Modelling
Incident Response
Threat Hunting
Detection and Response
Documentation Development
Metrics
Hunting Maturity Model (HMM)
Risk Management
Incident Response Plan
ROSI
Case Management
Capacity Planning
Modern Security Operations
Building a Security Operations Centre
Capability Development
Threat Modelling
Threat Actor Research
Cyber Deception
Detection Engineering
SOAR
Threat Intelligence

Certified Security Operations Manager (CSOM)

Recommended experience

2+ years' experience

Estimated time to complete

approximately 30 hours to complete

On-demand access

Complete in 6 months

Contact Sales
View Course Content Download brochure

Who is the course for?

CSOM is designed for professionals with experience in security operations or related disciplines who are moving into, or operating within leadership responsibilities, including:

  • Security Analysts
  • Senior Security Analysts
  • Security Managers
  • SOC Managers
  • Heads of Security Operations
  • Directors of Security Operations
  • Security Consultants

 

While typically aligned to professionals with 2+ years of experience, it also supports progression into management and leadership roles within security operations.

Why choose CSOM?

CSOM is built for practitioners who need to develop the capability to lead and mature security operations functions.

 

It combines management principles with operational context to support stronger decision-making, while building practical leadership capability across key security operations management areas.

 

  • Threat Modeling - Identify and assess threats to inform defensive strategy
  • Security Operations Design - Understand SOC functions, services, and the value they deliver
  • SOC Development - Plan and build security operations across people, process, and technology
  • Maturity Assessment - Evaluate SOC, incident response, threat hunting, and CTI capabilities to identify gaps
  • Metrics & Reporting - Use metrics to measure performance, identify issues, and support continuous improvement

Modern Security Operations

17 topics

2 quizzes

What Your Team Will Learn

This sections covers how modern security operations team operate in different environments, why risk management is key, and the core of SOC architecture.

Lessons

  • Domain Introduction
  • Business Objectives, Legal Enablers, and Considerations
  • Security Operations Teams

Skills Your Team Will Learn

Risk Management
Operational Models
Legal Considerations
Business Enablement
SOC Charter
Compliance
Incident Response

Building a Security Operations Team

Capability Development

Metrics, Maturity, and Measuring Success

CSOM Exam Preparation

Course Authors

Photo of Joshua Beaman

Joshua Beaman

Ready to strengthen your team's capabilities?

To find out more about how your SOC is operating take our SOC Leaders Maturity Assessment and gain a clear picture of your SOC’s effectiveness in minutes.

Our maturity assessment benchmarks your capabilities, identifies gaps, and delivers a personalized report with prioritized actions to strengthen your security operations.