The Primary Function of Security Operations Has Been Subverted The Security Operations Center (SOC) provides two major enterprise services: Situation Awareness (SA) for enterprise systems in the Cyber DomainIncident Response (IR) for events that require intervention For the last 20 years, innovation in the Security Information and Event...
Read More
ThetaPoint’s Security Reference Architecture has abstracted the Security Operations Center’s (SOC) technology stack into four simple buckets: Input, Output, Transform, and Analyze...
Read More
Repeatable processes create consistent outcomes – for better or worse. Defects in those processes can cause flawed investigations, system outages, and...
Read More
Many organizations struggle identifying, hiring, and retaining qualified security personnel. Because of this challenge, we often see organizations reducing their standards, leading...
Read More
ThetaPoint Provides Insight into Emerging SOAPA Needs ALBUQUERQUE, NM. – November 1, 2017 – I had the pleasure to sit down with Senior...
Read More
The Airbus breach teaches a clear lesson; organizations cannot solely focus on monitoring and protecting their own infrastructure, they must also manage...
Read More
It is amazing the number of times I hear of organizations switching from one SIEM platform to another, only to have the...
Read More
In this blog I will share a sample implementation of the technology stack described in the ThetaPoint Security Reference Architecture for Security...
Read More
If one of these statements sounds familiar, this blog post is for you: “I’m not getting enough value out of my SIEM"“My MSSP...
Read More
Your SOC’s analysis workflows mitigate most of the risks from intelligent actors. They also comprise your front-line staff’s most frequently executed...
Read More