Context
Security processes become effective when detection, response and accountability are connected properly.
What I pay attention to
- Connect incident and security processes
- Define criteria, prioritisation and escalation clearly
- Achieve operational effectiveness instead of paper compliance