NSA, ASD’s ACSC and other agencies publish guidance on SIEM and SOAR implementation

The National Security Agency (NSA) has joined the Australian Signals Directorate’s Australian Cyber Security Centre (ASD’s ACSC) and other agencies to release three publications providing guidance for cybersecurity executives and network defenders to consider when implementing Security Information and Event Management (SIEM) and Security Orchestration, Automation, and Response (SOAR) platforms.
 
SIEM solutions collect, aggregate, and correlate log data, empowering network defenders to monitor activity and uncover advanced cyber threats. SOAR platforms work hand-in-hand with SIEM tools, utilizing their data collection and analysis to deliver timely responses to detected malicious activity, especially in Zero Trust architectures.
 
Collectively, the publications define SIEM and SOAR platforms, outline potential challenges, provide recommendations for implementation, and highlight relevant benefits for executives and practitioners.

Read more at National Security Agency