Managing Security Intelligence: Effectively using Security Event and Information Management in organizations

No ratings

Presented at SCcongressToronto 2014 by

Paul Dwyer

Security logs are the last line of defense in any organization. The logs represent the complete record of what the security controls saw and what they can control. Within these logs lies a vast amount of security intelligence which can provide unique insights into an organizations operating environment. Are we targeted? Who is targeting us? Are we exposed? What can we do about it? Security Event and Information Management is method of collecting, analyzing and interpreting this vast landscape of data to provide for continuous improvement of security controls and answer these questions and more. The session will discuss how to use security event and information management to collect and analyze security information in meaningful ways to extract the valuable security intelligence. It will present a process model to enable continuous improvement of security controls based on the intelligence generated by this analysis.