Designing a Security Operations Strategy
The previous chapter discussed the design and framework for security architecture and controls based on technical and business goals. This chapter will discuss how to design and evaluate a strategy for security operations. This includes the design for logging and auditing for public, hybrid, and multi-cloud infrastructures to utilize SIEM and SOAR solutions. Once you have completed this chapter, you will be able to design a strategy for security operations and evaluate workflows and the incident management life cycle.
In this chapter, we are going to cover the following main topics:
- Designing a logging and auditing strategy to support security operations
- Developing security operations to support a hybrid or multi-cloud environment
- Designing a strategy for SIEM and SOAR
- Evaluating security workflows
- Evaluating a security operations strategy for the incident management life cycle
- Evaluating a security operations...
