Three step to identify the readiness of organisation for cyber security monitoring #MSSP

1. Security Operations
How do we know that an organisation is
ready for security monitoring?

2. About Author
Stephen Raju
Lead GRC Analyst at Aleph Tav Technologies with more than 4 years of
experience in improving resilience in corporate and governmental organisations
through Information Security Consulting, Implementation, Operations and Audit.
You can reach me on:
https://www.linkedin.com/in/stephenrajuc
https://twitter.com/stephenrajuc

3. Bubble Highlight
How do i
know?
Am I ready for
Cyber Security
Monitoring
Do I need to be
monitored?
Why!?

4. Business owners as well as MSSPs need to find answers
to this question.
Business Owners:
Who - CEO, CTO, CISO.
What - Is our organisation ready for
cyber security monitoring?
Managed Security Service Provider:
Who – Pre-Sales, SOC Head.
What - Can I deliver value through
security monitoring service, to
someone who is not ready for
monitoring?

5. How do I check my readiness?
Three steps to assess your readiness for cyber security monitoring:
1.Does my business allow for security monitoring of IT infra?
2.Are IT solutions installed and configured as per industry best practices?
3.Do I have personnel to manage IT infrastructure continuously?
If YES to all three questions, you are ready to be monitored.
If NO, fill the gaps in consultation with a Security Service/Solution Provider.

6. Decision-making flowchart
IT Operations
allowed for Security
Monitoring
Re-configure
Yes
No
Yes
Implement IT
infrastructure
management
No
IT solutions
are configured
as per best
practices
Continuously
Managed by
IT personnel
No
Yes

7. Thank you 