Security Operations in Practice

Security operations departments are growing in importance and recognition; they are responsible for the secure day-to-day running of an organisation's network, endpoint, application, identity and physical security controls. This book walks you through how to establish and grow a high-quality security operations team - both the blue (defensive) side and the red (offensive) side.Building and growing an effective security operations team requires more than just purchasing a series of information security tools, plugging them in and hoping for the best. It's about understanding the human element - hiring the right people to work together, understanding the business the team is working to protect, knowing when to build a tool rather than buy, and crafting procedures that allow the team to detect and respond to a wide variety of security threats.The book also contains real-life examples and industry case studies to show you how things can work in practice.