E099 - Security Foundations - Logging and Monitoring

In this next episode in our occasional Security Foundations series, fractional CISO Steve Sims returns to discuss the importance of logging, monitoring, and effective detection strategies to enhance security posture and compliance. Learn how to tune logs, leverage AI, and build a mature security program.

Previous Security Foundations series episodes:
- Asset Management: 📹https://youtu.be/GdiVzP2mby0 🎧https://www.socializingsecurity.com/e/e012-security-foundations-champions-of-asset-management/
- Vulnerability Management: 📹https://youtu.be/n0KVn89FUn0 🎧https://www.socializingsecurity.com/e/e063-security-foundations-plugging-holes-with-asset-management

Steve Sims on LinkedIn: https://www.linkedin.com/in/steve-sims-cissp/

Chapters
00:00 Introduction to Security Basics
02:45 Understanding Logging and Its Importance
05:30 Tuning Logs for Effective Monitoring
12:33 Compliance and Logging: A Critical Connection
14:34 Metrics for Success in Logging and Monitoring
18:24 The Tools of the Log Digestion Trade
24:21 The Role of Compliance With Logging and Security
28:33 The Markers of Logging and Monitoring Success
32:32 The Role of AI in Log Analysis
35:24 Setting Up a Security Program
37:17 Conclusion
38:36 Outro