{"slug":"cybersecurity-operations","version":"1.0","title":"Cybersecurity Operations","status":"draft","description":"Entry-level security operations: monitoring, triage, system hardening and incident response. Evidence from any provider is accepted if it is verifiable and awarded to the learner.","volumeOfLearning":"PT120H","fieldOfEducation":"0612","learningOutcomes":[{"title":"Monitor and triage security events","description":"Operates a SIEM, triages alerts and escalates incidents according to a documented runbook.","escoReference":""},{"title":"Harden Linux systems","description":"Applies CIS benchmarks, manages users and permissions, and verifies configuration drift.","escoReference":""},{"title":"Respond to incidents","description":"Executes containment, eradication and recovery steps and documents lessons learned.","escoReference":""}],"acceptedEvidence":"Course or platform certificates, vendor certifications, Open Badges, Micro-credential or Verified Skill attestations presented from an EUDI wallet, or work products reviewed by OSU.","typeOfAssessment":["portfolio-assessment","work-product-evaluation"],"_note":"escoReference values are to be filled with real ESCO skill URIs (https://esco.ec.europa.eu) before this pathway is set to status=published.","id":"https://portal.opensourceuni.org/pathways/cybersecurity-operations/1.0"}