Reducing Security Operations MTTD and MTTR
For many security operations (SecOps) teams, the real measure of where the “rubber meets the road” is tied to two metrics—Mean Time to Detect (MTTD) an attack, and the Mean Time to Respond (MTTR), (the...
View ArticleAutomate ThreatGrid Investigation and Response with Out-of-the-Box Swimlane...
Out-of-the-Box Integrations Automate Cisco AMP ThreatGrid Malware Defense Processes A common repetitive task performed in a SOC is to submit suspicious files to a malware sandboxing technology. These...
View ArticleImproving SecOps Communications with Your Board of Directors
Presenting well to the board is critical for security operations. It’s frequently the best opportunity to demonstrate value in quantifiable terms to solidify continued support for the organization’s...
View ArticleDon’t Be an Asymptote! Understanding the Cost of Delayed Threat Response
Figure1 – Example of an asymptote of a function that approaches infinity on the y-axis. It should be the unwritten rule of cybersecurity: Don’t make an asymptote of yourself or your team members. As...
View ArticleAutomated Incident Response: Respond to Every Alert
Cybersecurity management is a challenge. Many organizations lack the resources and staff needed to tackle the growing number of threats to their organization. This inability to handle the volume of...
View ArticleUsing Situational Awareness to Improve Threat Response Effectiveness
Every organization wants to improve its cyber-defenses. But doing so requires continuous adaptation to ensure that the security operations team is equipped to respond to evolving threats. Finding new...
View ArticleSecurity Operations Efficiency: Do More with Your Existing Staff
Assembly line workers at the Ford Motor company apply Frederick Taylor’s “Scientific Management” principles on an auto assembly line. You’re thinking like Frederick Taylor, aren’t you? “Wait a minute,”...
View ArticleSecurity alert management: Simplified with Automation
Security alert management is a challenge. Large organizations handle between 10,000 and 150,000 security alerts per day and simply don’t have the resources to handle this overwhelming number of...
View Article