Information Security Management, 2nd Edition

2.3 Operations

Operations encompass the daily running of the “business,” whether the business is to create products or deliver services (or both). It includes the business processes, including system implementations, monitoring, working with the compliance team for auditing and incident handling, working with the development team in DevOps, and the management of infrastructure. In other words, it is comprised of daily activities in an organization. Information security operations, more specifically, deal with monitoring the infrastructure, managing risks, responding to threats and attacks, and ensuring countermeasures are in place, and that causes of vulnerabilities are remediated, whether in the infrastructure, or whether by the development ...