| | OCTOBER 2022ENTERPRISE SECURITY8IN MY OPINIONIN MY OPINIONWHY USE SECURITY ANALYTICS FOR THE ENTERPRISE?By Felipe Medina, VP of Information Security Engineering, BankUnitedIf ever you have been involved in either a breach or an attack in your professional career the first thing you realize is what security analytics may have been able to early detect the attack. As the conspiracy theorists we all are, we believe that this is simply not attainable. In the larger picture you are right as the bad guys do something that we as industry professionals rarely do, they collaborate very well and share information. In order to ensure efficiency and accuracy for the security analytical dashboards and alerts you set up are key indicators of what could be happening and allow for proactive measures to be taken both before, during and while an event is occurring. Now, let's get to why you really want to read this article: What are the steps we can take to make our tools first become better connected and evolve our security analytics and tools from a reactive to a proactive state?First, let's ensure we level set, this methodology requires executive buy in and investment in IT and IS departments. This will require collaboration with your business lines as well to ensure you are addressing the money makers for your enterprise/business. So, the first thing is learning from any issues or attacks and adding this intelligence into our platforms to alert at proper thresholds. I am a big fan of using standard deviations which allow me to baseline traffic on platforms, like a Felipe Medina
< Page 7 | Page 9 >