New educational lab for Security Command Center can help address security talent gap

To address the chronic shortage of security talent, Google Cloud has introduced a new virtual, lab-based training for Security Command Center, our flagship cloud security solution. The new lab, Mitigate Threats and Vulnerabilities with Security Command Center, has no security knowledge prerequisites and can be completed in just six hours.

Non-security IT professionals can gain the skills to discover security vulnerabilities, identify potential threats to cloud resources, and respond to security issues across a Google Cloud environment. The lab can also help reduce toil for security professionals by providing a non-production environment in which they can experiment and hone their skills to increase overall productivity.

After completing the lab and final challenge, participants will receive a skill badge, a digital credential that demonstrates proficiency with Security Command Center.

Designed by Google Cloud Security experts

The lab curriculum and challenge tests were developed by Google Cloud security experts, and cover core Security Command Center capabilities in a practical, hands-on format. This is the first skill badge and training asset dedicated to Security Command Center and is available to Google Cloud customers and partners.

The curriculum includes the following labs:

• Getting Started with Security Command Center provides an overview of Security Command Center’s user interface, with an explanation of key security terms and concepts. Participants will learn about the types of threats and vulnerabilities reported by Security Command Center. The lab also includes instructions on how to deactivate and mute non-relevant findings to improve security operations.
• Analyzing Findings with Security Command Center shows how to augment Security Command Center’s built-in analysis capabilities by exporting security findings, integrating with popular SIEM solutions, and publishing findings to Google Cloud’s BiqQuery for external analysis and report generation.
• Identify Application Vulnerabilities with Security Command Center explains how to use Web Security Scanner to discover vulnerabilities in web applications running in Google Cloud. Lab participants have an opportunity to launch a web application that is vulnerable to cross-site scripting attacks, scan the application for weaknesses, and then remediate the vulnerability.
• Detect and Investigate Threats with Security Command Center shows how Security Command Center’s threat detection services can find malicious activity in a Google Cloud environment. Participants will learn how cloud logs are used to detect suspicious activity, and how a vulnerable web service powered by Google Kubernetes Engine can be exploited.
• Challenge Lab, the capstone to the course, where participants can test their skills by analyzing detailed information produced by Security Command Center to find a solution to a common security event.

To register for Security Command Center lab-based training, purchase credits and go to Mitigate Threats and Vulnerabilities with Security Command Center. Go to the Google Cloud console to get started today with Security Command Center.