Strategic:This role is more involved around the big picture, planning and making organizational decisions with future in mind. Here you only want to know about what are the current threats or is there a threat present in location where we are going to open a new office.
Operational:This role is all about making decision based on the intelligence you have at hand and explain why the decision was made in such as way. In order to make decision you need to prioritize the task at hand, have enough context about the task(in order to answer any questions) and then take proper action.
Tactical: This role is the most technical of the of them all and belongs to the security team members. In this role the team members are responsible of maintaining and looking to see what is the new item in security realm. This role is also responsible of finding out or feeding the security system with indicators in terms of IP, Hash, and emails titles etc.
Here is a matrix that summaries each of these roles:
Read more :http://www.isightpartners.com/2015/04/thoughts-from-rsa-improving-it-all-strategic-operational-tactical-with-cyber-threat-intelligence/
A significant strategy for securing organizational data include having a good tactical plan. Security professionals need to plan well based on available tools and techniques. All 3 stages are very important as well.
ReplyDelete