The Cybersecurity and Infrastructure Agency (CISA) recently released its report A Tale of Two SOCs: Insights from Two Red Team Assessments.
The results of those assessments have been compiled into an advisory outlining the red team’s activity, the organizations’ defensive actions, lessons learned, and key actions that can be taken to mitigate risk factors.
Three of the biggest takeaways included the importance of not only having detection tools, but ensuring they have well-defined baselines and alert filtering, the underestimated risk of cloud environments, and how organizational siloing prevented effective incident response.
Read on to learn more.
Source: https://www.cisa.gov/news-events/cybersecurity-advisories/aa26-237a
