Putting the Top 10 SIEM Best Practices to Work (e-book)
Very often we talk to prospective SIEM / log management customers, and even new AccelOps clients, who ask us – what are some of the SIEM best practices? Having the pleasure of working with some of the best and brightest in the SIEM/log management field – I attempted to draft a white paper on the subject. Following great input received by participants who joined me to present at a recent SANS Ask the Expert webcast on that same topic – my initial white paper quickly grew to an e-book. I invite you to reserve your copy.
In short, this e-book provides guidance to operationalize security and put the top 10 best SIEM practices to work – considerations concerning selection, implementation, processes, metrics and technology. Rather than an exhaustive examination of SIEM – the purpose is to offer pertinent insights and details with regards to how IT organizations and information security professionals can better ensure successful SIEM implementation and on-going improvement, while at the same time further optimize resources and accelerate return on investment.
Beyond introducing basic SIEM concepts and relaying the Top 10 SIEM Best Practices, each of the ten chapters provides:
- an Overview and Highlight Processes: topic introduction, process considerations, exploring operational concerns, getting results, and avoiding common pitfalls
- Recommended Metrics: the more popular SIEM dashboards, reports, alerting and related operational measurements to support security operations, incident response and compliance
- Technology considerations: sources, controls and related SIEM functionality
I invite you to reserve your copy – compliments of AccelOps.
Scott Gordon
I would like to extend special thanks to the following industry experts whose prior webcast participation and interactive dialogue contributed content within this e-book:
Dr. Anton Chuvakin – Log management and security compliance expert, consultant and author
Randolph Barr (CISSP) – Chief Security Officer at Qualys and former CSO of WebEx Communications
Tim Mather (CISSP, CISM) – Cloud security expert and former Chief Security Strategist for RSA and CSO at Symantec
Bill Sieglein (CISSP) – Founder and CEO of the CSO Breakfast Club
Jamie Sanbower (CISSP, CSA) – Security CSE at Cisco and prior director of Cyber Security Practice at Force3
