Incident Response August 16, 2023

SIEM and SOAR in 2023: Key trends and new changes

4 min read - Security information and event management (SIEM) systems remain a key component of security operations centers (SOCs). Security orchestration, automation, and response (SOAR) frameworks, meanwhile, have emerged to fill the gap in these capabilities left by many SIEM systems. But as…

Intelligence & Analytics June 5, 2023

SOCs spend 32% of the day on incidents that pose no threat

4 min read - When it comes to the first line of defense for any company, its Security Operations Center (SOC) is an essential component. A SOC is a dedicated team of professionals who monitor networks and systems for potential threats, provide analysis of…

Incident Response April 3, 2023

The important role of SOAR in cybersecurity

4 min read - Understaffed security teams need all the help they can get, and they are finding that help through SOAR. SOAR — security orchestration, automation and response — is defined by Gartner as the “technologies that enable organizations to collect inputs monitored…

Zero Trust March 7, 2023

SOAR, SIEM, SASE and zero trust: How they all fit together

4 min read - Cybersecurity in today’s climate is not a linear process. Organizations can’t simply implement a single tool or strategy to be protected from all threats and challenges. Instead, they must implement the right strategies and technologies for the organization’s specific needs…

Risk Management August 1, 2022

How to prepare for and respond to a data privacy breach

4 min read - Before I started covering cybersecurity, I thought the term ‘breach’ had a single meaning — that an attacker stole data from a computer system. I also thought all the different versions of the word meant the same thing. However, I’ve…

Intelligence & Analytics October 12, 2021

What Is Extended Detection and Response (XDR)?

6 min read - Extended detection and response (XDR) is a security solution that delivers end-to-end visibility, detection, investigation and response across multiple security layers. Core components of an XDR architecture include federation of security signals, higher-level behavioral and cross-correlated analytics, and closed-loop and…

Intelligence & Analytics September 14, 2021

Privileged Access Management: The Future of Cyber Resilience

2 min read - Attacks against critical infrastructure and government agencies have been surging. Some attackers want to extort money; others intend to steal data. But the victims all have one thing in common: they need to be able to fend off attacks and…

Zero Trust August 17, 2021

Zero Trust or Bust: What It Is and Why It Matters to Data Security

4 min read - How many different ways can data be compromised? First, both external and internal threats can target it. External threats can come in the form of malware or ransomware. Meanwhile, internal threats can come from malicious insiders working from behind trusted…

Intelligence & Analytics July 7, 2021

What’s Next for SIEM? A View From the 2021 Gartner SIEM Magic Quadrant

4 min read - Security information and event management (SIEM) solutions continue to evolve, as shown in the 2021 Gartner Magic Quadrant for SIEM, which is a great representation of the changing security landscape and the evolution of key capabilities and experiences that are…

Intelligence & Analytics May 3, 2021

Alert Fatigue: How AI Can Help You Address Your Most Important Alerts

3 min read - When someone says the word hurricane, I hear the shrill weather-alert warning sound in my head. Having grown up in Florida and now living in North Carolina, I’ve been through many hurricanes and have the routine down — stock up…