Zero Trust Security: An Enterprise Guide

© Jason Garbis and Jerry W. Chapman 2021

J. Garbis, J. W. ChapmanZero Trust Securityhttps://doi.org/10.1007/978-1-4842-6702-8_11

11. Security Operations

Jason Garbis¹   and Jerry W. Chapman²

(1)

Boston, MA, USA

(2)

Atlanta, GA, USA

 

Many enterprises have invested in creating a Security Operations Center (SOC) as a physical or virtual organization, compiling a set of focused people, processes, and technologies to address threats, vulnerabilities, and incident response. This chapter examines two primary tools in use in SOCs—Security Information and Event Management (SIEM) and Security Orchestration, Automation, and Response (SOAR). We’ll be looking at these tools from the perspective of Zero Trust, exploring how together they can improve the effectiveness ...