Technology / Cyber Threat Detection:
Solution: Software that aids in detection that is sophisticated, bidirectional, real time and predictive.
How do we gauge the solution's efficacy? Look at a number of solutions and triangulate among them; look at number of actual events versus false positives.
Lessons learned:
Detection: Data vs intelligence
Accuracy: No or minimal false positives
Accountability
Actionable
Simple and Customizable Rules Management
Response time and SLA
Comments