Why operation-centric security returns the high ground to the defenders>
SC Magazine – Lior Div
The inefficiency of alert-centric security

An alert-centric, siloed approach to securing complicated network infrastructures leaves attackers more than enough opportunity to remain hidden in a networkâs seams, and it makes detecting, tracking and eliminating complex attacks all but impossible. Thatâs why companies keep spending more on security every year, yet nothing ever seems more secure.

The shift to an operation-centric approach

An operation-centric approach to security lets defenders instantly visualize the whole of a malicious operation from root cause to every affected endpoint in real-time through multi-stage visualizations that deliver all of the details of an attack across all devices and all users immediately. This gives analysts the power to identify and understand attacks as they occur, in turn reducing dwell time and the risk an attack will become a breach.

Additionally, an operation-centric approach gives security teams the option to automate a good portion of the necessary response options to reduce the mean time to remediation. When security teams do this, organizations are not just more secure, they can also shift critical resources from alert response towards strategic, time-saving security initiatives.
Link: https://www.scmagazine.com/perspectives/why-operation-centric-security-returns-the-high-ground-to-the-defenders/