Workload and queue management is part of SOC Operations & Management, which unlocks once you complete every lesson in Incident Response & SOAR.

This keeps the curriculum sequenced: each phase builds on skills exercised in the one before it.