Don’t Forget Response

"Organizations that have deployed FireEye and other breach detection appliances often forget to plan for incident response and management of the appliances," said Terry Kurzynski, a senior partner at Chicago-based solution provider Halock Security Labs.  It’s a set-it-and-forget-it mentality that ends in failure, Kurzynski said.  Gartner recommends organizations adjust internal processes to plan for “continuous detection and response.” It takes an IT team and for organizations without the budget for additional personnel, solution providers are gaining business by selling subscription-based security response services. Professional services include investigation, containing and quarantining, forensic analysis and determining the full scope of a successful attack.