A Growing Symphony of Security Analytics Tools Needs Careful Orchestration

Security analytics tools available to companies are increasing rapidly. However, cyber incident and vulnerability prevention, detection, response, and recovery times remain significant challenges as the types of attacks and attack vectors increase. Newer cyber analytics using machine learning are of primary interest because rule-based or signature-based prevention tools struggle to detect or stop advanced cybersecurity threats. CIOs and CISOs find that they often need to integrate or “orchestrate” existing cyber analytical tools, processes, and data into repeatable, automated workflows to fully support solid security operations activities. Concurrently, architectural challenges flourish as cloud services, mobile usage and IoT devices rapidly generate increasing amounts of data, new systems endpoints, and network traffic flows.