Category: Gartner

Selecting the Right SOC Model for Your Organization Published 24 February 2020 – ID G00464962 – 22 min read An SOC provides centralized security event monitoring and threat detection and response capabilities, and may support other security operations’ functions and business unit requirements. This research helps security and risk management leaders identify the best SOC model for their… Continue reading Selecting the Right SOC Model for Your Organization

Magic Quadrant for Application Security Testing Published 29 April 2020 – ID G00394281 – 61 min read Modern application design and the continued adoption of DevSecOps are expanding the scope of the AST market. Security and risk management leaders will need to meet tighter deadlines and test more complex applications by seamlessly integrating and automating AST in the… Continue reading Magic Quadrant for Application Security Testing

Critical Capabilities for Security Information and Event Management Published 24 February 2020 – ID G00381141 – 52 min read Security information and event management solutions keep evolving to address demands across a range of buyers and requirements. Security and risk management leaders responsible for security operations should use this research to evaluate and select the most appropriate solutions.… Continue reading Critical Capabilities for Security Information and Event Management

Magic Quadrant for Security Information and Event Management Published 18 February 2020 – ID G00381093 – 72 min read https://www.gartner.com/doc/reprints?id=1-5WG67KN&ct=181205&st=sb Security and risk management leaders increasingly seek security information and event management solutions with capabilities that support early attack detection, investigation and response. Users should balance advanced SIEM capabilities with the resources needed to run and tune the… Continue reading Magic Quadrant for Security Information and Event Management

Gartner Observations – SIEM, MDR, NTA, MTA, EDR The Threat Detection Trinity Hunt via ArcSight Investigate Real-time correlations via ArcSight ESM (now with distributed correlation) Detection analytics with ArcSight User Behavior Analytics (UBA) https://www.microfocus.com/media/white-paper/power_of_the_threat_detection_trinity_wp.pdf SOC Visibility Triad is actually missing a few details – Structured and Unstructured Monitoring, East-West/North-South Traffic. (User email, web and application… Continue reading Gartner Observations – SIEM, MDR, NTA, MTA, EDR

Market Guide for Security Orchestration, Automation and Response Solutions Published 27 June 2019 – ID G00389446 – 26 min read SOAR solutions are gaining visibility and real-world use driven by early adoption to improve security operations centers. Security and risk management leaders should start to evaluate how these solutions can support and optimize their broader security operations capabilities.… Continue reading Market Guide for Security Orchestration, Automation and Response Solutions