Talented people and proper processes are more important than technology when it comes to running a successful security operations centre (SOC), delegates at Infosecurity Europe 2017 in London were told yesterday.
Emma Smith, technology security director at Vodafone, said that organisations should not get "swept up" in the flood of tools hitting the market.
She said that process, behaviour and culture can deliver "more bang per buck" that technology ever could. Smith added that it was more important to "attract and retain the right people".
A clear career path offered by firms was key to attracting the right people to an IT organisation, she said.
Close Brothers CISO Chris Gibson if organisations gave people interesting jobs it would "keep them interested".
O2 Telefonica director of business operations, Adrian Gorham said that having the right processes in place was vital to managing an effective SOC, as the operations centre cannot run in isolation from other parts of the organisation.
Gorham said such an operations centre "monitors and picks up alerts" but needs good relationships with the rest of the business and this also means needing to "work with business analysts and system architects".
Head of information security at the London Metal Exchange, Russell Wing, said that an SOC needed the right metrics in place as well as response processes to quickly close down any attacks. He added that you "cannot secure what you don't measure" and what "happens in your environment you need to know".
-
Should AI PCs be part of your next hardware refresh?AI PCs are fast becoming a business staple and a surefire way to future-proof your business
-
Westcon-Comstor and Vectra AI launch brace of new channel initiativesNews Westcon-Comstor and Vectra AI have announced the launch of two new channel growth initiatives focused on the managed security service provider (MSSP) space and AWS Marketplace.
-
PyPI attack: Targeting of repository 'shows no sign of stopping'News Greater collaboration and understanding of attackers’ tactics is key to mitigating open source security threats
-
Capita's handling of cyber attack shows companies still fail at breach reportingAnalysis Capita initially told customers there was “no evidence” of data having been compromised in the March cyber attack
-
Malware being pushed to businesses by search engines remains a pervasive threatNews High-profile malvertising campaigns in recent months have surged
-
There's only one way to avoid credential stuffing attacksOpinion PayPal accounts were breached last year due to a credential stuffing attack, but can PayPal avoid taking responsibility?
-
Five things to consider before choosing an MFA solutionIn-depth Because we all should move on from using “password” as a password
-
Cyber security suffers from a communication problemNews Negative language around ‘human failures’ is eroding trust between security teams and broader business functions - it has to stop
-
Does LastPass really deserve a last chance?Opinion After several disastrous security incidents and a communications breakdown, it’s time to leave LastPass for pastures new
-
What is the spell-jacking vulnerability and how can your business avoid exposing data?
In-depth Spell-jacking vulnerabilities are threatening to unwittingly leak data to third parties, undermining any drive to protect privacy
