According to the 7th (ISC)2 Global Information Security Workforce Study (GISWS), 2015, the following security concerns are considered to be the most critical:
- Application Vulnerabilities
- Malware
- Configuration Mistakes / Oversights
- Mobile Devices
- Hackers
- Faulty Network / System Configuration
- Internal Employees
- Cloud-Based Services
- Cyber Terrorism
- Trusted Third Parties
This list is the result of a global workforce survey conducted by (ISC)2 in 2015. Nearly 14.000 security professionals in different positions (management, executive, and technical) have given their valuable insights.
How does LogPoint fit in helping to prevent or minimize the effects of the abovementioned threats?
One of the most crucial elements is to collect sufficient amounts of data from as many different log sources as possible. LogPoint collects data from all kinds of different log sources, takes this data and converts it into a standardized format. This process is called “normalization”. LogPoint provides pre-defined normalization packages for many different log sources – out-of-the-box. Moreover, if there is a particular log source missing, LogPoint provides its customers with the necessary data within a very short time. There is no need to wait through pre-defined update cycles, which makes it easy to analyze data as quickly as possible without losing too much time!
Once the data has been normalized, it is possible to quickly create queries or run pre-defined searches to analyze the incoming data. Use either simple queries or more complex correlation queries to detect possible threats and receive a warning in real-time, create a dashboard, or run a report. Again, LogPoint provides content (alerts, dashboards, queries, and reports) out-of-the-box for more efficiency. Many of the topics mentioned in the GISWS are already covered in LogPoint.
LogPoint helps you detect possible threats in real-time and does so by applying its unique simplicity, which ensures that the analyst avoids making mistakes due to sheer complexity issues. Possible threats as mentioned in the 7th (ISC)2 Global Information Security Workforce Study (GISWS) are already covered by pre-defined content or are easy to implement.
You can read the original article, here.