{"id":245,"date":"2018-06-03T00:21:00","date_gmt":"2018-06-03T00:21:00","guid":{"rendered":"https:\/\/securityeverafter.com\/2018\/06\/03\/is-your-soc-flying-blind\/"},"modified":"2018-06-03T00:21:00","modified_gmt":"2018-06-03T00:21:00","slug":"is-your-soc-flying-blind","status":"publish","type":"post","link":"https:\/\/securityeverafter.com\/is-your-soc-flying-blind\/","title":{"rendered":"Is Your SOC Flying Blind?"},"content":{"rendered":"

I recently posted the <\/span>below<\/a> on the <\/span>SANS Internet Storm Center<\/a>.<\/span>
\n
\n<\/span><\/p>\n

Can you imagine being pleased to learn that the pilot of your next flight had anything less than full visibility into the operation of the next airplane you board? Why would you settle for anything less for your Security Operations Center (SOC)? How long can your you stand for your SOC team to not know there is a problem in your environment? <\/div>\n
When building a SOC several years ago, I recall making screens ready in the event of an unexpected, yet necessary VIP tour. The intent of these is to impress those dignitaries by displaying cool things that are happening on your network. After you have finished impressing your VIPs, what actionable information should be displayed in your SOC to help them respond to threats in your environment?<\/div>\n
Consider spending time this week ensuring your SOC wall is populated with meaningful screens that add value to your SOC by asking these questions.<\/div>\n