Information Security Handbook

Management of security operations center tools

The SOC team must ensure that the tools used to monitor the enterprise information systems are properly secured and maintained. It will be very difficult, if not impossible to properly secure modern, complex, interconnected information systems without the aid of well-maintained and properly functioning information security tools. The SOC team must have a toolset capability at their disposal that allows them to have visibility throughout the information systems that they are responsible for monitoring.

Visibility into your organizational information systems is one of the most important aspects of a well-developed information security program. The reality is that even with a suite of well-developed ...