Structuring Incident Types to Streamline Incident Response
Predrag Zivic · 2011
Defining security and privacy incidents and detection alerts can become a conundrum of rules and events. Information security operations groups responsible to manage security monitoring tools and to respond to security incidents may decide to streamline operations by structuring tools around incident types in order to optimize detected events, alerting rules and incident detection processes.