Faraz Siraj, RSA’s head of Americas channel sales, says it’s critical for organizations to have complete visibility into their security operation center, which is why at this week’s Black Hat USA 2018 conference the security vendor will put a spotlight on its SOC and SIM solutions.
“This year at Black Hat we really look forward to sharing with all of our customers the ability of the evolved SOC and the evolved SIM,” said Siraj. “The security operation center today is so important these days because of today’s threat landscape. And, understanding the threat landscape and understanding all of the information sources that are coming at the security operation center – they need to be organized and utilized in the best possible way.”
The RSA Advanced SOC Solution lets security teams eliminate blind spots with visibility across logs, networks, and endpoints, and inspect every network, packet session and log event for threat indicators at time of collection. Also, RSA helps manage the process of gathering business and IT data, which can provide valuable context in determining the most relevant information. Organizations can also detect advanced attacks before they impact business and take targeted action on the most important incidents.
“It’s not just logs and packets – but it’s also net flows. It’s also about user behavior entity analysis. It’s also about security – it’s orchestration and automation.”
For more of Siraj’s interview ahead of Black Hat, watch the above video.