CSIRT
Measuring security operations capabilities and improving their maturity, efficiency, and effectiveness
· ☕ 15 min read
To slightly paraphrase Peter Drucker’s famous quote, one can’t manage what one can’t measure. This – of course – holds true even for Computer Security Incident Response Teams (CSIRTs) and Security Operations Centers (SOCs). The only question is, how can we “measure” what they do in a meaningful way? This is what we will discuss in this article...

SANS ISC Diary - Traffic Light Protocol (TLP) 2.0 is here
· ☕ 1 min read
A new Diary of mine was published today on the SANS Internet Storm Center website. In this one, we’ll take a look at a new version of the Traffic Light Protocol standard, which was published by FIRST earlier this week…