SPACE–Cybersecurity

2025 1st Run: Jun. 14 & 21

2025 2nd Run: Nov. 8 & 15

Time: 1230-2030H (16 total hours)

Module Fee: P13,895

This program provide its participants with an overview and initial understanding of what is Security Operations and equip its participants with the knowledge on particular activities in a Security Operations Center (SOC), such as defining and handling security threats, the use of various SOC tools, and other pertinent information on different workstreams.

Module Objectives

At the end of the module, the participant will be able to:

• Understand the concept, importance, and features of a Security Operations Center.
• Examine how incident lifecycle management fits into the overall SOC process.
• Analyze the people, process, and technology aspect of SOC and be able to define best practices and each of these pillars.
• Evaluate common security incidents in the industry.
• Formulate use cases to cater to different security incident scenarios and be able to articulate how each of these use case can streamline operational and tactical efforts in the organization.

Module Outline

Session 1:

• Security Threats 101
• What is Security Operations Center (SOC)?
• Cybersecurity Kill Chain & Defensible Matrix
• Incident Lifecycle, Service Value Chain and Continual Improvement

Session 2:

• SOC Tools
• Phishing/Email Security
• Web Application Firewall (WAF)
• Data Loss Prevention (DLP)
• USB/Tools Health/File Permission and File Integrity Monitoring

Lecturer: Ronald "Gonz" Gonzales

Ronald “Gonz” Gonzales is an information risk management, security architecture and business technology practitioner. He brings with him three decades of experience and demonstrated value delivery across various industries in local, regional and global settings.

Gonz was a Risk Advisory Partner at Deloitte Southeast Asia and helped clients achieve a robust cybersecurity and data privacy posture for compliance and continuing information protection.
In his immediate past enterprise role, Gonz served as Chief Information Security Officer of JG Summit Holdings, one of the Philippines’ largest and most diversified multinational conglomerates where he is responsible for the design and implementation of enterprise information security’s architecture; governance, risk and compliance function; cybersecurity operations and security engineering.
Before joining JG Summit, Gonz was an independent IT risk consultant with his practice focusing on information security, data privacy and enterprise risk management in the fast-moving consumer goods, banking and finance, sales and distribution, logistics and transportation, information technology, telecommunications, manufacturing, health care, development and government sectors.

Gonz’s past professional experience includes serving as Global Service Management Leader for Mondelēz Business Services, Director for Performance & Technology Advisory Services at KPMG Philippines, Director for Knowledge and Transformation for Prople BPO, IT consultant for Ayala Corporation, IT Head of AstraZeneca Philippines, and Operations Manager for D.F. King & Co. in New York.

Gonz received his B.A. in Public Administration from the University of the Philippines, Diliman and is candidate for a master’s degree in Technology Management in the same University. He also attended the City University of New York’s Baruch College (application development graduate certificate program) and the U.S. Army Field Artillery School in Fort Sill, Oklahoma.

Gonz is certified in IT Infrastructure Library (ITIL) Foundations, a Computer Hacking Forensics Investigator (CHFI), has a Certificate of Cloud Security Knowledge (CCSK), an Information Security Management System (ISMS – ISO/IEC 27001) Certified Practitioner, Certified Payment-Card Industry Security Implementer (CPISI), Certified Payment Security Practitioner (CPSP), Lead Auditor for ISO 22301 (BCMS) and ISO/IEC 27001 (ISMS), Auditor for ISO 9001 (QMS), Certified Data Privacy Solutions Engineer (CDPSE), Certified Information Security Manager (CISM), Certified Ethical Hacker (CEH), Certified Threat Intelligence Analyst (CTIA), and Certified Information Systems Security Professional (CISSP).

Gonz maintains active memberships with various professional and industry organizations: Information Systems Audit and Control Association (ISACA), the Internet Society (ISOC), the Association of Business Process Management Professionals (ABPMP), Information Systems Security Association (ISSA), Information Security Officers Group (ISOG), International Association of Privacy Professionals (IAPP), EC-Council, and the International Information
System Security Certification Consortium (ISC2). He is the President of the Cloud Security Alliance (CSA) Philippines Chapter, Chapter Leader of OWASP Manila, and is a founding member of the SABSA Institute.

Gonz participates in government and industry activities and is a member of the Technical Committee on Information Technology (BPS/TC 60) of the Philippine national government (jointly under the Department of Information and Communications Technology and the Bureau of Philippine Standards,
Department of Trade and Industry).

Gonz is a Philippine representative to the International Organization for Standardization (ISO) and is designated as a country expert in the field of information security controls and services.

Gonz writes about and lectures on information security and data privacy as part of his practice and advocacy. He works with several learning institutions to promote STEM and cybersecurity education. He also serves as President of the Manila Science High School Alumni Foundation Board of Trustees.