Cyber Security Agony Uncles

Inherited AV, MDR, No SIEM, & a Lot of Noise: I’m the Difficult One! - Cyber Security Agony Uncles | th4ts3cur1ty.company


Listen Later

Monthly cyber security podcast, with our experts Stephen Ridgway and Rich Benfield. If you are in a sticky situation, or need any advice to do with cyber security answered anonymously and on the podcast, email us at [email protected]. This week's question is:I'm new to a company as a head of it it's my second head of IT role but it's the first time I've had cyber security within my remit this is great and it's one of the reasons I took the role because I'd really like to move into cyber security some decisions were made prior to me starting for example their AV and MDR they're not critical National infrastructure so he's this person thinks that it's Overkill because they both form similar functions and they think that AV would have been fine so they go on to say there's no seam but there is logging captured from a bunch of SAS products but there's no security alerting on that the previous guy put out a tender for a scene provider he selected one but the contract wasn't signed needless to say everyone here is on board with it and I've come in and I'm questioning things I think if we have a scene right but who has time to monitor it not me so the questions are do we kill off the logging, we currently have there's been a lot of buying here and no use made of those purchases. I've come in and I look like I'm being difficult for the sake of it I feel like I need to take a breath and actually look at the problems before blowing my small budget that was given to the previous trigger-happy guy what should I do here move forward we've seen to keep my position politically not literally or trample on it and start again knowing I'm going to piss off a whole bunch of people.Don't forget to like and subscribe to our channel!

...more
View all episodesView all episodes
Download on the App Store

Cyber Security Agony UnclesBy th4ts3cur1ty.company