SANS Security Leadership New Orleans 2023 - Keynote: Top-Down Security Operations

Running a SOC is a complex combination of data sources, processes, and teamwork, and it's easy to get lost in the details. In this keynote we'll step back to think big picture about what a SOC truly needs to deliver and present some simple mental models that cyber security analysts and managers can use to abstract away complexity and gain clarity on their true priorities. We'll discuss SOC goals, workflow, how to gather those important but "hard to measure" metrics and use a top-down approach to help focus you on your path to cyber defense success.