From the course: Introduction to SecOps on Google Distributed Cloud (GDC) by Google

Course overview

- [Instructor] Welcome to the Google Distributed Cloud, or GDC, Air-Gapped Security Operations Fundamentals series of courses. Security itself is an all encompassing endeavor. Within each of the three courses that make up this series, you'll focus on a specific aspect of GDC for security operations. The first course provides a high-level overview of security fundamentals on the GDC platform. You'll be introduced to the GDC offering and architecture, the SecOps roles in the GDC Security Operations Center or SOC, and the definitions of the security principles. You'll also learn about the day-to-day processes and tools that you can use to keep the GDC deployment secure, both proactively and reactively. Finally, you will review the default logs, dashboards, and alerts, which are at the core of GDC security monitoring. The second course provides you with a deep dive into the workflows of Tier 1 and Tier 2 security analysts. These workflows are monitoring, intake, and incident response. You'll go through a variety of video demonstrations that mimic how you would tackle these workflows in GDC. The third course provides you with a deep dive into the workflows of Tier 3 analysts. This workflow will focus on vulnerability management, threat modeling, and security engineering. Once again, you'll watch video demonstrations on how you would tackle these activities. To benefit fully from taking this course, you should have these prerequisite skills and knowledge. Prior understanding of SecOps. Basic proficiency with Windows and Linux logs. Basic understanding of Kubernetes terminology for logging. Prior completion of the Google Cloud Fundamentals Core Infrastructure course. Or equivalent experience with Google Cloud Services hosted by GDC. Throughout this series of courses, you'll learn about GDC in context by exploring how Cymbal Federal, a fictional organization, accomplishes its SecOps goals using the GDC Air-Gapped platform. Imagine that you have just joined the GDC Security Operations Center team for Cymbal Federal as a security analyst. Congratulations on your new role. Cymbal Federal is a government entity aligned to support the broad mission objectives of the executive branch of government. During a recent review, the operation and application capabilities of Cymbal Federal were designated mission critical. An organization-wide, multi-year digital transformation program is underway. Cymbal Federal aims to ensure compliance while modernizing its suite of applications with GDC. GDC offers a solution for use in an on-premises environment. Up to this point, the Cymbal Federal internal teams have mastered Google Cloud Fundamentals and Kubernetes, and have defined the major applications to develop on GDC. The team is now focused on the creation of the first end user applications and workloads on GDC. In preparation for the Go Live, Cymbal Federal has awarded their existing third-party data center management partner, the task of creating and running the Mission Operation Center. This partner has started to establish the "operate" portion of the GDC program. This involves end-to-end integrated infrastructure management. As a new staff member, you are being onboarded in order to handle security as part of the GDC Security Operation Center for Cymbal Federal. Based on your previous work experience, you have some familiarity with SecOps. You also have a high-level understanding of the GDC platform. You now want to learn more about the security operations on GDC so that you are able to keep the platform secure. The Cymbal Federal case study attempts to mirror an enterprise-level scenario and aims to help you understand how the different components of the platform fit together and what their capabilities are. You will revisit this case study throughout all three courses. Each course will include a variety of video presentations, quizzes, and video demonstrations. By completing this course, you'll learn everything you need to begin your role-specific operations in the security operation center of GDC. Let's get started.

Contents