Security operations in practice : building effective blue and red teams

Security operations departments are growing in importance and recognition; they are responsible for the secure day to day running of an organisation's network, endpoint, application, identity and physical security controls.

This book walks you through how to establish and develop a highly effective security operations team.

This requires more than just purchasing a series of information security tools, plugging them in and hoping for the best.

As you will learn, it's about hiring the right people to work together, understanding the business the team is working to protect, knowing when to build a tool rather than buy, and crafting procedures that allow the team to detect and respond to a wide variety of security threats.