Why the traditional SOC and SIEM are failing?

The primary factor that leads to failed SOC projects is the heavy reliance on the SIEM platform. Vendors are selling the SIEM as the foundation of an effective SOC where in actual fact the SIEM is just a tool. In most cases, SIEMs are often built around SOC methodology of the 2000s and that methodology today equates to broken use cases, alert fatigue, and burnt out analysts. Add to this recipe a lack of skill around incident response and the inevitable outcome is a flop.

Why it is important to attend

While the traditional prevention techniques are not the silver bullet, we as security professionals need to accelerate the time it takes to detect and respond to security incidents appropriately. In this series, we learn how to detect the myriad of different security incidents in our organisations and how to respond to reduce the damage.