Driving Content Creation with Use Case Forms
Speaker: Cindy Jones, Senior Security Analyst, United Services Automobile Association (USAA)
How many times have you heard something like this: “Compliance says to bring this new feed into ArcSight ESM and monitor it for bad stuff”? However, if you don’t have a plan for what to look for, how do you even know that your new feed can provide it – whatever data that is? A generic “look for bad stuff” statement can be very dangerous for analysts. It transfers all responsibility to you and absolves the feed provider. This presentation provides a general use case form and covers how to extract this information from your customers to help secure your network environments.