Page 60 - Cyber Warnings

outsourcing provides better results. However, the State of Security Operations Report finds that
a mix of both has actually been the most effective.

This hybrid model of staffing is an effective strategy to combat the continued struggle to find and
retain security staff, which was found to once again be the number one concern of security
operations. Organizations can leverage a Managed Security Services Provider (MSSP) to help
scale their operations, while keeping their risk management in-house ensuring increased
capabilities from outsourcing and maintaining proper documentation and transfer of knowledge.

Technology management, eyes-on-screen monitoring, and shared-insourced operations are
areas where organizations and service providers can work closely together to increase the
effectiveness of security solutions.

Building the Intelligence-driven SOC for Today and the Future

While 82 percent of organizations’ SOCs are still struggling to meet target maturity levels, the
security programs that incorporate the right people, processes and technologies are succeeding
in building sustainable defenses.

The State of Security Operations Report highlights that there is no single magic bullet for solving
the security challenge, as is evident by the decrease in maturity from hunt-only programs and
too much automation.

As adversaries evolve and attacks grow in sophistication, organizations must also continue to
invest in their security operations and adapt to the changing environment to protect the
business’ most critical assets.

Read the full report at hpe.com/software/StateOfSecOps.

About The Author
Roberto Sandoval is Manager, WW SIOC Strategic Solutions &
Enablement, HPE Security at Hewlett Packard Enterprise.Roberto leads a
team that coordinates strategic activities and initiatives in the design,
development, operation, and maturation of world class security intelligence,
operations, and cyber defense for HPE's global customers around HPE
Security & Information Governance Software solutions.

Over the last 5+ years with HPE, Roberto has driven the design, delivery,
and quality of over a dozen Security Operations Centers through security
use cases, operational workflow, metrics, and continuous improvement in
intelligence, analysis, and operations.

60 Cyber Warnings E-Magazine January 2017 Edition
Copyright © Cyber Defense Magazine, All rights reserved worldwide