In episode 152 of Cybersecurity Where You Are, Sean Atkinson is joined by Cliff Moten, Manager, Cybersecurity Solutions Engineering at the Center for Internet Security® (CIS®); and Richard Vargas, Security Operations Center Manager at CIS. Together, they discuss how the 24x7x365 CIS Security Operations Center (SOC) and CIS Managed Detection and Response™ (CIS MDR™) work together to accelerate response time while enriching telemetry. Here are some highlights from our episode:

• 01:40. Demystifying SOCs and MDR as cybersecurity concepts
• 02:52. How the CIS SOC works to provide information, context, and next steps for an event
• 05:04. Artificial intelligence and automation as ways to accelerate response time
• 10:20. Real-world instances where a fast response time made a difference
• 13:10. What it means to support underfunded organizations with the resources they need
• 17:22. The role of contextual cyber threat intelligence in accelerating response times
• 19:01. The value of security orchestration, automation, and response (SOAR) in helping defenders move quickly
• 27:33. Lessons that organizations can use to cut down on their incident response times

Resources

• The CIS Security Operations Center (SOC): The Key to Growing Your SLTT's Cyber Maturity
• Episode 148: How MDR Helps Shine a Light on Zero-Day Attacks
• Episode 144: Carrying on the MS-ISAC's Character and Culture
• Episode 137: National Cybersecurity Through SLTT Resilience
• Combatting Ransomware
• Establishing Essential Cyber Hygiene
• CIS Community Defense Model 2.0

If you have some feedback or an idea for an upcoming episode of Cybersecurity Where You Are, let us know by emailing podcast@cisecurity.org.