Lesson 2: Triage, Prioritization, Assignment, Playbooks, Tasks, Threat Intelligence, and Investigations

Lesson Overview

This lesson develops practical capability in triage, prioritization, assignment, playbooks, tasks, threat intelligence, and investigations for the ServiceNow Security Incident Response Implementation Training. Learners connect platform data, workflow, security, user experience, testing, and operational support.

Topics Covered

Triage, Prioritization, Assignment, Playbooks, Tasks, Threat Intelligence, and Investigations: purpose, terminology, architecture, personas, and measurable business outcomes
ServiceNow applications, tables, records, roles, workspaces, data relationships, and configuration used for triage, prioritization, assignment, playbooks, tasks, threat intelligence, and investigations
Requirements, process design, dependencies, controls, governance, and implementation sequencing for triage, prioritization, assignment, playbooks, tasks, threat intelligence, and investigations
Hands-on configuration and workflow practice focused on playbooks and investigation
Testing, validation, dashboards, diagnostics, troubleshooting, documentation, release, and operational support for triage, prioritization, assignment, playbooks, tasks, threat intelligence, and investigations

Practical Activity

Create a design or configuration worksheet for triage, prioritization, assignment, playbooks, tasks, threat intelligence, and investigations: purpose, terminology, architecture, personas, and measurable business outcomes.
Build and validate a practical ServiceNow exercise for hands-on configuration and workflow practice focused on playbooks and investigation.
Review logs, reports, test evidence, controls, and documentation for testing, validation, dashboards, diagnostics, troubleshooting, documentation, release, and operational support for triage, prioritization, assignment, playbooks, tasks, threat intelligence, and investigations.

Key Takeaways

Explain the architecture and business purpose of triage, prioritization, assignment, playbooks, tasks, threat intelligence, and investigations.
Configure or implement the core ServiceNow capabilities required for hands-on configuration and workflow practice focused on playbooks and investigation.
Validate results, identify common failure points, document decisions, and support a controlled release.

Write a Review Cancel reply

You must be logged in to post a comment.

ServiceNow Security Incident Response Implementation Training 1 Section4 Lessons16 Hours

Curriculum