Cultivating your cybersecurity operations

Steve Bowers

Let’s outline the conception, development, and evolution of cybersecurity operations, starting with business objectives. A cyber operation built arbitrarily or with vague goals in mind cannot succeed. We will examine a high-level framework that can be used to develop a cyber operation from the ground up, or add focus and context to existing cyber ops. We will observe, orient, decide, and act our way toward developing situational awareness, an enhanced security posture, decreased response time for cyber events, and accurate metrics to help drive the practice forward. Not every organization has the same cybersecurity needs, and so one must discard the cookie cutter when developing a new cybersecurity operation, and be prepared to tailor a solution that fits with business requirements. That is where I come in…