Collecting Security Process Data
To maintain an effective security posture, organizations need to collect and analyze data in their technical and administrative security processes. This data can be used to identify areas where security controls are weak or missing, allowing them to make informed decisions about how to improve security.
There are a number of different sources of data that can be used to collect information about security processes. These include the following:
- Security logs
- Audit reports
- Interviews with security staff
Once data has been collected, it needs to be analyzed to identify areas where security controls are weak or missing. This analysis can be done manually or using automated tools. These tools include security information and event management (SIEM) systems such as Splunk, vulnerability detection tools such as Nessus, endpoint detection and response (EDR) solutions such as Carbon Black, and data loss prevention (DLP) solutions such...
