登录查看更多内容

What is the best way to align your security architecture monitoring with your organization's goals?

由人工智能和领英社区提供技术支持

Security architecture monitoring is the process of collecting, analyzing, and reporting on the security status and performance of your IT infrastructure, applications, and data. It helps you detect and respond to threats, comply with regulations, and optimize your security investments. But how do you align your security architecture monitoring with your organization's goals? Here are some tips to help you.

此文章中的业界达人

由社区从 8 条内容中精选。了解更多

Irina Neagu Muceli

Creative Thinker | Strategy Driver | Cloud Evangelist | Value Creator through Sales and Delivery Orchestration
Kaushik Ganesh

EY - Tech Risk & Global Social Media Ambassador | Certified IS Auditor | Cyber Security | IT/OT Controls | Risk…

1 Understand your business context

Before you design and implement your security architecture monitoring, you need to understand your business context. This includes your mission, vision, values, objectives, strategies, and risks. You also need to identify your stakeholders, customers, partners, and regulators. By understanding your business context, you can align your security architecture monitoring with your organization's priorities, expectations, and requirements.

添加您的观点

Irina Neagu Muceli

Creative Thinker | Strategy Driver | Cloud Evangelist | Value Creator through Sales and Delivery Orchestration
(已编辑)
举报内容
Business context is everything. We need to know the law and regulations in the industries in which we perform and we must connect the underlying requirements with IT capabilities: choose and implement the right tools and define / implement the right processes.

已翻译

赞
Alexander Tarantul

Principal IT Architect | Business-IT Convergence | Digital Strategy
举报内容
It’s crucial to understand what the business is trying to achieve and how much risk it can handle. Regularly assess risks, incorporate security into the overall business strategy. The chosen monitoring tool must capture the appropriate metrics and events and most importantly present these events in an easily digestible way so that people can take appropriate action in a timely manner.

已翻译

赞

2 Define your security goals and metrics

Next, you need to define your security goals and metrics. These are the specific outcomes and indicators that you want to achieve and measure with your security architecture monitoring. Your security goals and metrics should be SMART: specific, measurable, achievable, relevant, and time-bound. They should also be aligned with your business goals and metrics. For example, if your business goal is to increase customer satisfaction, your security goal might be to reduce the number of security incidents that affect customer data and service.

添加您的观点

Irina Neagu Muceli

Creative Thinker | Strategy Driver | Cloud Evangelist | Value Creator through Sales and Delivery Orchestration
举报内容
Always align business objectives with your internal KPIs, this will give a purpose to your employees, whether they work in the security team or other operations teams.

已翻译

赞
Kaushik Ganesh

EY - Tech Risk & Global Social Media Ambassador | Certified IS Auditor | Cyber Security | IT/OT Controls | Risk Analytics | Compliance Reporting
举报内容
It is important for organizations to have strategies that are consistent with their business and security objectives. These strategies should enable them to regularly monitor, test, and document how they implement, measure, optimize, impact, and report on their controls and activities.

已翻译

赞

3 Choose your security architecture monitoring tools and methods

Then, you need to choose your security architecture monitoring tools and methods. These are the technologies and techniques that you use to collect, analyze, and report on your security data. You should choose your security architecture monitoring tools and methods based on your security goals and metrics, as well as your budget, resources, and capabilities. You should also consider the compatibility, scalability, and usability of your tools and methods. For example, if your security metric is to monitor the network traffic for anomalies, you might use a network intrusion detection system (NIDS) as your tool and anomaly detection as your method.

添加您的观点

Irina Neagu Muceli

Creative Thinker | Strategy Driver | Cloud Evangelist | Value Creator through Sales and Delivery Orchestration
举报内容
The monitoring tools must be chosen in alignment with your ops teams skills and capabilities, so that you increase your team productivity.

已翻译

赞

4 Implement and test your security architecture monitoring

After you choose your security architecture monitoring tools and methods, you need to implement and test them. This means that you need to deploy, configure, and integrate your tools and methods with your IT infrastructure, applications, and data. You also need to test them for functionality, performance, and reliability. You should follow the best practices and standards for security architecture monitoring, such as the ISO/IEC 27001 and the NIST SP 800-137. You should also document your security architecture monitoring processes and procedures.

添加您的观点

Ricardo Hernandez

Ops Superintendent | Restarting computers with 18 years of career experience | I learned how to follow long before I learned how to lead | MSIT | TS/SCI
举报内容
Nothing will test your security better than an outside certified ethical hacker. A trusted red team will test everything from incident detection to monitoring capabilities, and will also allow an organization to test their blue team oriented responses. Increased perspective from these types of exercises allows for greater information system hardening and is a worthwhile investment when considering the comparable financial losses and other negatice effects of a potential cyber security breach.

已翻译

赞

5 Monitor and improve your security architecture monitoring

Finally, you need to monitor and improve your security architecture monitoring. This means that you need to collect, analyze, and report on your security data regularly and consistently. You also need to review and evaluate your security goals and metrics, as well as your tools and methods. You should use feedback, lessons learned, and benchmarks to identify and implement improvements for your security architecture monitoring. You should also update your security architecture monitoring according to the changes in your business context, goals, and risks.

添加您的观点

Irina Neagu Muceli

Creative Thinker | Strategy Driver | Cloud Evangelist | Value Creator through Sales and Delivery Orchestration
(已编辑)
举报内容
This type of exercise is easier when you use the market leaders solutions that would allow you to collect, aggregate and report the important data, while not being overwhelmed with so many signals.

已翻译

赞

6 Here’s what else to consider

This is a space to share examples, stories, or insights that don’t fit into any of the previous sections. What else would you like to add?

添加您的观点

Irina Neagu Muceli

Creative Thinker | Strategy Driver | Cloud Evangelist | Value Creator through Sales and Delivery Orchestration
举报内容
Use the market best practices, do not try to reinvent the wheel and surround yourself with good people, security managed services companies that have already well defined business process aligned with customers SLAs and KPIs. I would recommend tailor-made solutions only for organizations with very specific standards only.

已翻译

赞

IT Operations

+ 关注

给文章评分

我们借助人工智能创建了此文章。您认为这篇文章怎么样？

很棒不太好

举报此文章

查看全部

What is the best way to align your security architecture monitoring with your organization's goals?

1

2

3

4

5

6

1 Understand your business context

2 Define your security goals and metrics

3 Choose your security architecture monitoring tools and methods

4 Implement and test your security architecture monitoring

5 Monitor and improve your security architecture monitoring

6 Here’s what else to consider

IT Operations

给文章评分

感谢您的反馈

更多IT Operations相关文章

更多相关阅读内容

What is the best way to align your security architecture monitoring with your organization's goals?

1

2

3

4

5

6

1 Understand your business context

2 Define your security goals and metrics

3 Choose your security architecture monitoring tools and methods

4 Implement and test your security architecture monitoring

5 Monitor and improve your security architecture monitoring

6 Here’s what else to consider

IT Operations

给文章评分

感谢您的反馈

查看其他技能