CHAPTER

12

The Security Value of Operations

As indicated in Chapter 10, the second key security value in the Security FORCE Behavioral Model is operations. As with the key security value of failure described in Chapter 11, the FORCE Model challenges us to reconsider our notions regarding what operations means for information security. Of all the Security FORCE values, operations is probably the one that many InfoSec programs think they do best. The industry is increasingly populated with sophisticated (and expensive) security operations centers (SOCs) to monitor activity, combined with dashboards, alerts, reviews, and operational assessments at multiple enterprise levels to maintain security situational awareness. Many companies swear by operational ...

Get People-Centric Security: Transforming Your Enterprise Security Culture now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.