​Over the past few blogs we have studied some of the benefits of implementing monitoring solutions. While compliance drives this need for many industries, businesses will also find cost saving by uncovering breaches faster and decreasing overall investigation times. We have gone over the pros and cons of outsourcing the work. In the final part of this series we will summarize this information and discuss how Tandem Cyber Solutions approaches the topic.

​In our latest blog installments on monitoring, we spoke about compliance and decreasing overall detection times. These two benefits alone are fantastic; however, why should organizations monitor logs from their environment? And if they do, should they use a centralized logging platform (SIEM)? 

In part two of our month-long series on the benefits of monitoring network and system events (audit logs), we will be discussing how with more insight, companies can detect a breach more quickly. A misconception is that if logs are aggregated and people are watching the logs, bad guys will be found. False! Depending on the logs collected, the capabilities of an analyst and the signatures in the SIEM, experiences may vary. ​

​Network and system monitoring are an important part of any well-formed security program, not to mention a requirement for some industry regulations. To understand what we mean by monitoring and how better insight can lead to a more prepared organization, I am going to break down the topic for business and system owners.