Security Operations: Page
-
Brand Experience Team/TechTarget
Expert AdviceBusiness continuity vs. disaster recovery vs. incident response
To stay in business, expect the unexpected. Learn how business continuity, disaster recovery and incident response differ -- and why organizations need plans for all three.
By Ashwin Krishnan , Alissa Irei • Jan. 22, 2024 -
Brand Experience Team/TechTarget
Expert Advice
Incident response automation: What it is and how it works
Many of today's security operations teams are understaffed and overwhelmed. Learn how incident response automation can help them work smarter, instead of harder.
By Alissa Irei , Andrew Froehlich • Jan. 22, 2024 -
Brand Experience Team/TechTarget
CISA posts incident response guide for water utilities
In its guide, CISA urged water and wastewater sector utility operators to harden their security posture, increase information sharing and build incident response plans.
By Alexander Culafi • Jan. 18, 2024 -
Brand Experience Team/TechTarget
Expert Advice
SOAR vs. SIEM: What’s the difference?
When it comes to the SOAR vs. SIEM debate, it's important to understand their fundamental differences to get the most benefit from your security data.
By Andrew Froehlich • Jan. 17, 2024 -
Brand Experience Team/TechTarget
Expert Advice
Incident management vs. incident response explained
While even many seasoned cybersecurity leaders use the terms 'incident management' and 'incident response' interchangeably, they aren't technically synonymous.
By Rob Shapland • Jan. 17, 2024 -
Brand Experience Team/TechTarget
Expert Advice
Top 6 SOAR use cases to implement in enterprise SOCs
Automating basic SOC workflows with SOAR can improve an organization's security posture. Explore six SOAR use cases to streamline SOC processes and augment human analysts.
By Jessica Groopman, Andrew Froehlich • Jan. 17, 2024 -
Brand Experience Team/TechTarget
How to create a CSIRT: 10 best practices
The time to organize and train a CSIRT is long before a security incident occurs. Certain steps should be followed to create an effective, cross-functional team.
By Ed Moyle • Jan. 17, 2024 -
Brand Experience Team/TechTarget
Expert Advice
13 incident response best practices for your organization
An incident response program ensures security events are addressed quickly and effectively as soon as they occur. These best practices can help get your organization on track fast.
By Charles Kolodgy • Jan. 16, 2024 -
Brand Experience Team/TechTarget
incident response team
An incident response team is a group of IT professionals in charge of preparing for and reacting to any type of organizational emergency.
By Wesley Chai, Sarah Lewis • Jan. 16, 2024 -
Brand Experience Team/TechTarget
10 types of security incidents and how to prevent them
Cyberattacks are more varied and numerous than ever. Learn the key signs of common security incidents and how to respond to keep systems and data safe.
By Alissa Irei, TechTarget Contributor • Jan. 12, 2024 -
Brand Experience Team/TechTarget
Expert Advice
Cloud incident response: Frameworks and best practices
Cloud incident response, like it sounds, involves responding to incidents in the cloud. But there are nuances to be aware of and unique best practices to follow.
By Dave Shackleford • Jan. 11, 2024 -
Brand Experience Team/TechTarget
Amsterdam arrest leads to Babuk Tortilla ransomware decryptor
A joint effort by Cisco Talos, Avast and Dutch law enforcement results in an all-encompassing Babuk ransomware recovery key and the arrest of a threat actor.
By Arielle Waldman • Jan. 9, 2024 -
Brand Experience Team/TechTarget
Top incident response tools: How to choose and use them
The OODA loop helps organizations throughout the incident response process, giving insight into the incident response tools needed to detect and respond to security events.
By Kevin Beaver • Jan. 9, 2024 -
Brand Experience Team/TechTarget
Top 30 incident response interview questions
Job interviews are nerve-wracking, but preparation can minimize jitters and position you to land the role. Get started with these incident response interview questions and answers.
By Ed Moyle • Jan. 9, 2024 -
Brand Experience Team/TechTarget
How to become an incident responder: Requirements and more
Incident response is a growth area that provides career advancement options and a good salary. Here's an in-depth look at job requirements, salaries and available certifications.
By Ed Moyle • Jan. 8, 2024 -
Brand Experience Team/TechTarget
Opinion // Omdia Analysts' Perspectives
Cloud threat detection and response priorities for 2024
To improve cloud detection and response, security pros need to get closer to cloud applications and software development processes. Here's how that can be accomplished.
By Jon Oltsik • Dec. 13, 2023 -
Brand Experience Team/TechTarget
How EDR systems detect malicious activity
Endpoint detection and response tools help SOCs separate benign events from malicious activity. Learn how this EDR function works.
By No Starch Press, Kyle Johnson • Dec. 4, 2023 -
Brand Experience Team/TechTarget
CISA relaunches working group on cyber insurance, ransomware
Following a hiatus, the Cybersecurity Insurance and Data Analysis Working Group will relaunch in December to determine which security measures are most effective to reduce risk.
By Arielle Waldman • Nov. 22, 2023 -
Brand Experience Team/TechTarget
Opinion // Omdia Analysts' Perspectives
Security continues to lag behind cloud app dev cycles
Enterprise Strategy Group research revealed security gaps in cloud-native software development -- issues that should be addressed as soon as possible.
By Jon Oltsik • Nov. 20, 2023 -
Brand Experience Team/TechTarget
What is cyber hygiene and why is it important?
Cyber hygiene, or cybersecurity hygiene, is a set of practices individuals and organizations perform regularly to maintain the health and security of users, devices, networks and data.
By Alissa Irei • Nov. 16, 2023 -
Brand Experience Team/TechTarget
cybersecurity asset management (CSAM)
Cybersecurity asset management (CSAM) is the process created to continuously discover, inventory, monitor, manage and track an organization's assets to determine what those assets do and identify and automatically remediate any gaps in its cybersecurity protections.
By Andrew Froehlich • Nov. 3, 2023 -
Brand Experience Team/TechTarget
Opinion // Omdia Analysts' Perspectives
How to overcome the beginner cybersecurity career Catch-22
The workforce gap constantly makes headlines, but that doesn't mean breaking into the field is easy. Get advice on how to start on an entry-level cybersecurity career path.
By Jon Oltsik • Oct. 31, 2023 -
Brand Experience Team/TechTarget
ISO 27002 (International Organization for Standardization 27002)
The ISO 27002 standard is a collection of information security management guidelines that are intended to help an organization implement, maintain and improve its information security management.
By Paul Kirvan, Ben Cole • Oct. 30, 2023 -
Brand Experience Team/TechTarget
What does an IT security manager do?
IT security managers need to have a passion for learning and critical thinking skills, as well as understand intrusion prevention and detection.
By Andy Patrizio • Oct. 30, 2023 -
Brand Experience Team/TechTarget
Structured Threat Information eXpression (STIX)
Structured Threat Information eXpression (STIX) is a standardized Extensible Markup Language (XML) programming language for conveying data about cybersecurity threats in a way that can be easily understood by both humans and security technologies.
By Madelyn Bacon, Rahul Awati • Oct. 19, 2023
Previous
