ThetaPoint’s Security Reference Architecture has abstracted the Security Operations Center’s (SOC) technology stack into four simple buckets: Input, Output, Transform, and Analyze (IOTA) These categories focus on the critical services that the SOC performs. Many proprietary tools provide more than one of these services, but since...
Read More
Repeatable processes create consistent outcomes – for better or worse. Defects in those processes can cause flawed investigations, system outages, and...
Read More
Many organizations struggle identifying, hiring, and retaining qualified security personnel. Because of this challenge, we often see organizations reducing their standards, leading...
Read More
The Primary Function of Security Operations Has Been Subverted The Security Operations Center (SOC) provides two major enterprise services: Situation Awareness (SA) for enterprise...
Read More
ThetaPoint Provides Insight into Emerging SOAPA Needs ALBUQUERQUE, NM. – November 1, 2017 – I had the pleasure to sit down with Senior...
Read More
The Airbus breach teaches a clear lesson; organizations cannot solely focus on monitoring and protecting their own infrastructure, they must also manage...
Read More
It is amazing the number of times I hear of organizations switching from one SIEM platform to another, only to have the...
Read More
In this blog I will share a sample implementation of the technology stack described in the ThetaPoint Security Reference Architecture for Security...
Read More
If one of these statements sounds familiar, this blog post is for you: “I’m not getting enough value out of my SIEM"“My MSSP...
Read More
Your SOC’s analysis workflows mitigate most of the risks from intelligent actors. They also comprise your front-line staff’s most frequently executed...
Read More