With all of this information that needs to be analyzed, the final result for an under-resourced IT team is burnout and information overload.
If you are in an SMB or a large organization, you deal with this on a daily basis. Let's try to break this down to something more palatable.
Even in parts 1 and 2, we should try to understand a few things about our dilemma:
- How do we establish a tactical communications channel?
- How will IT security communicate with IT operations on any issues?
- How will IT operations communicate with IT security on any issues?
- What can we do to reduce information overload and burnout?
- What is the information that we need to review?
- Where can we automate?