Is It Time for Sec-Ops?
February 23, 2012

Aruna Ravichandran
CA Technologies

If an attacker were bogging down your apps, how would you know? You wouldn't, unless you bridge the gap between ops and security.

Inspired by the teamwork that began with the Agile movement, IT organizations are tearing down walls in the service delivery process. DevOps is shortening release cycles by uniting development and delivery. But another wall stands in the way of an agile enterprise: the one between operations and security.

Most ops teams have no way of knowing when they’re dealing with an attack or a slow server. With the security and ops teams working separately, issues can take longer to identify, and longer to fix, compromising both operational performance and the security of the enterprise.

It’s time to demolish the divide between the Network Operations Center (NOC) and the Security Operations Center (SOC).

Here’s how to get started.

Step 1: Prioritize

Start with what matters most:

- Which apps or services are the most critical to your organization?

- Which ones can’t afford to have a security problem remain undiagnosed for even a few minutes?

Step 2: Collaborate with the security team

Because you’ll be shifting some responsibility from one team to another, it’s important to ensure that everyone understands why.

- Facilitate communication between the NOC and SOC teams about what they will gain by bringing security events into the NOC.

- Ensure the NOC team understands the importance of giving the SOC team visibility into certain aspects of NOC monitoring tools.

- Discuss the various tools you’ll need to accomplish this coordination and the processes you will need to create or modify.

Step 3: Identify the right monitoring tools

It’s important to look for a tool that won’t add new complexity to the NOC or its processes. The ideal tool would consolidate and correlate all events—security and operational—under a single pane of glass.

It also should:

- Provide real-time monitoring information.

- Allow for customization, so that both the SOC and NOC teams can see the information they need to see.

- Integrate security system events with the NOC's overall event management system.

- Connect security-related events with the business services they affect so you can prioritize problems when they arise.

- Identify a problem’s cause with little or no manual work.

This article is adapted from a longer article that appeared in the Discover Performance newsletter.

Aruna Ravichandran is VP, Product & Solutions Marketing, DevOps, CA Technologies
Share this

Industry News

November 24, 2020

Red Hat announced new capabilities and features for Red Hat OpenShift, the company's enterprise Kubernetes platform.

November 24, 2020

Sectigo released Chef, Jenkins, JetStack Cert-Manager, Puppet, and SaltStack integrations for its certificate management platform.

November 24, 2020

DataStax released K8ssandra, an open-source distribution of Apache Cassandra on Kubernetes.

November 23, 2020

Spectro Cloud has released a new, self-hosted version of its flagship product, Spectro Cloud.

November 23, 2020

GitLab completed integration of Peach Tech, a security software firm specializing in protocol fuzz testing and dynamic application security testing (DAST) API testing, and Fuzzit, a continuous fuzz testing solution providing coverage-guided testing.

November 23, 2020

Fugue announced the availability of its SaaS product in AWS Marketplace, further simplifying the process for Amazon Web Services customers to use Fugue to bring their environments into compliance quickly, demonstrate compliance at any time, and Shift Left on cloud security.

November 19, 2020

Rollbar announced AI-assisted workflows powered by its new automation-grade grouping engine.

November 19, 2020

Buildkite expanded its integration with GitHub and introduced a new onboarding experience.

November 19, 2020

Rancher Labs launched a new Partner Program for the OEM and embedded community.

November 18, 2020

Puppet announced its evolution to an integrated automation platform to enable key business initiatives such as scaling DevOps, risk reduction, policy as code, and evolving cloud strategies.

November 18, 2020

Adaptavist has joined the GitLab partner program as a Select partner.

November 18, 2020

Postman launched the beta version of public workspaces, a hub that makes it possible for both API producers and consumers to seamlessly communicate and collaborate in real time without team or organizational boundaries.

November 17, 2020

Red Hat introduced new capabilities for Red Hat Enterprise Linux and Red Hat OpenShift intended to help enterprises bring edge computing into hybrid cloud deployments.

November 17, 2020

Humio announced the availability of the Humio Operator.

November 17, 2020

Accurics announced that Terrascan, the open source static code analyzer that enables developers to build secure infrastructure as code (IaC), has been extended to support Helm and Kustomize.