With thousands of available cybersecurity tools and not enough people to run the ones you already have – how do you know if you have the right ones?
This type of problem isn’t new. In this whitepaper, RedSeal’s Dr. Mike Lloyd suggests a decision framework used by military strategists – who have long years of experience with complex, shifting battlefields and insufficient troops.
The framework breaks decision making into four steps. Begin by asking what tools you have – and what you may need – in each area. Also consider how the tools work together.
- Observe: Knowing what’s going on in your network, including sensing, scanning and log reading technologies.
- Orient: Interpreting raw data in the context of your network.
- Decide: Weighing what’s important, using SIEMs or machine learning tools.
- Act: Implementing decisions quickly, using automation tools like security orchestration or SOAR.
To learn how this framework helps determine the truly essential parts of your defensive technology, download our whitepaper here:
