The Airbus breach teaches a clear lesson; organizations cannot solely focus on monitoring and protecting their own infrastructure, they must also manage the risk brought on by their supply chain business partners. However, more and more organizations struggle to operate and maintain their security environment,...
Read More
It is amazing the number of times I hear of organizations switching from one SIEM platform to another, only to have the...
Read More
In this blog I will share a sample implementation of the technology stack described in the ThetaPoint Security Reference Architecture for Security...
Read More
If one of these statements sounds familiar, this blog post is for you: “I’m not getting enough value out of my SIEM"“My MSSP...
Read More
Your SOC’s analysis workflows mitigate most of the risks from intelligent actors. They also comprise your front-line staff’s most frequently executed work....
Read More
Repeatable processes create consistent outcomes – for better or worse. Defects in those processes can cause flawed investigations, system outages, and missed...
Read More
Many organizations struggle identifying, hiring, and retaining qualified security personnel. Because of this challenge, we often see organizations reducing their standards, leading...
Read More
ThetaPoint’s Security Reference Architecture has abstracted the Security Operations Center’s (SOC) technology stack into four simple buckets: These categories focus on the critical...
Read More
Framework Overview The challenge of running an effective Security Operations Center far outweighs the effort to build one. This difficulty stems from the...
Read More
The Primary Function of Security Operations Has Been Subverted The Security Operations Center (SOC) provides two major enterprise services: Situation Awareness (SA) for enterprise...
Read More