.svg)
ISO 27001Detection Engineering
Posts tagged Detection Engineering
7 posts
ISO 27001 A.8.16: Monitoring Activities
ISO 27001 A.8.16 requires that networks, systems, and applications are monitored for anomalous behavior and that potential security incidents are ...
Filter by Tag
ISO 27001 A.8.15: Logging
ISO 27001 A.8.15 requires an organization to produce, store, protect, and review logs that record activities, exceptions, faults, and security...
EDR vs MDR: The Simple Difference, and Which One You Need
EDR and MDR sound almost identical, and the two terms often get used interchangeably. The short explanation: EDR is the tool, and MDR is the service...
SOC 2 CC7.3: Evaluating Security Events to Identify Incidents
SOC 2 CC7.3 requires a company to evaluate detected security events, decide which of them are incidents, and act on the ones that are. It sits in the...
SOC 2 CC7.2: Monitoring System Components for Anomalies
SOC 2 CC7.2 is the security monitoring criterion in the Trust Services Criteria: it requires an organization to monitor its systems for anomalies and...
SOC 2 Logging and SIEM for Bare Metal Servers
In a cloud environment, centralized logging is a toggle. Enable CloudTrail, turn on VPC Flow Logs, configure GuardDuty, and the compliance platform...
Security Logging and Monitoring Architecture for SOC 2 and ISO 27001
In cybersecurity, what you don’t know can hurt you. An unmonitored system is a black box where attackers can operate undetected for weeks or months. ...