Episode 152: Driving Response Time While Enriching Telemetry

In episode 152 of Cybersecurity Where You Are, Sean Atkinson is joined by Cliff Moten, Manager, Cybersecurity Solutions Engineering at the Center for Internet Security® (CIS®); and Richard Vargas, Security Operations Center Manager at CIS. Together, they discuss how the 24x7x365 CIS Security Operations Center (SOC) and CIS Managed Detection and Response™ (CIS MDR™) work together to accelerate response time while enriching telemetry. Here are some highlights from our episode: 01:40. Demystifying SOCs and MDR as cybersecurity concepts 02:52. How the CIS SOC works to provide information, context, and next steps for an event 05:04. Artificial intelligence and automation as ways to accelerate response time 10:20. Real-world instances where a fast response time made a difference 13:10. What it means to support underfunded organizations with the resources they need 17:22. The role of contextual cyber threat intelligence in accelerating response times 19:01. The value of security orchestration, automation, and response (SOAR) in helping defenders move quickly 27:33. Lessons that organizations can use to cut down on their incident response times Resources The CIS Security Operations Center (SOC): The Key to Growing Your SLTT's Cyber Maturity Episode 148: How MDR Helps Shine a Light on Zero-Day Attacks Episode 144: Carrying on the MS-ISAC's Character and Culture Episode 137: National Cybersecurity Through SLTT Resilience Combatting Ransomware Establishing Essential Cyber Hygiene CIS Community Defense Model 2.0 If you have some feedback or an idea for an upcoming episode of Cybersecurity Where You Are, let us know by emailing [email protected].