CSN24: Driving Content Creation with Use Case Forms

Document created by jmerrill on Sep 12, 2010Last modified by CindyJ on Jul 8, 2014
Version 2Show Document
  • View in full screen mode

Driving Content Creation with Use Case Forms
Cindy Jones, Senior Security Analyst, United Services Automobile Association (USAA)
Level: Basic
How many times have you heard something like this: “Compliance says to bring this new feed into ArcSight ESM and monitor it for bad stuff”? However, if you don’t have a plan for what to look for, how do you even know that your new feed can provide it – whatever data that is? A generic “look for bad stuff” statement can be very dangerous for analysts. It transfers all responsibility to you and absolves the feed provider. This presentation provides a general use case form and covers how to extract this information from your customers to help secure your network environments.