You manage a newly created Security Operations Center (SOC), your team is being inundated with security alerts and don't know what to do. What is the BEST approach to handle this situation?

Question

Accepted Answer

B. Tune the sensors to help reduce false positives so the team can react better

Answer

A. Tell the team to do their best and respond to each alert

Answer

C. Request additional resources to handle the workload

Answer

D. Tell the team to only respond to the critical and high alerts

You manage a newly created Security Operations Center (SOC), your team is being inundated with security alerts and don't know what to do. What is the BEST approach to handle this situation?

Question

Options

How the community answered

Community Discussion