Cyber-Security-Monitoring-Guide

Cyber Security Monitoring and Logging GuideBenefits of using CREST membersWhat organisations often need is the ability to access demonstrably skilled, knowledgeable and competent individualsworking for organisations that have been independently assessed against best practice and who have the policies, processesand procedures in place to monitor all relevant events whilst protecting confidential information.Many CREST members are well placed to meet these – and other – requirements. By appointing one of these CRESTorganisations you can rest assured that you are procuring cyber security monitoring and logging services from a trusted,certified external company who employ professional, ethical and highly technically competent individuals.Respondents to the Project Survey placed extremely high value on a range of cyber security monitoring activities offered byCREST members, with the top six being that they:• Are up-to-date with the latest cyber threats, adversaries, techniques and countermeasures• Respond to cyber security incidents in a fast, effective manner• Provide a high (and assured) baseline standard in terms of both skills and processes• Adhere to processes and procedures that are subject to regular reassessment• Offer fast provision of an effective cyber security monitoring capability• Help organisations to achieve compliance with legal, regulatory, corporate or government standards, managing bothbusiness constraints and risks.Make the appointmentAfter carefully considering all the relevant supplier selection criteria – and evaluating potential suppliers - you will then needto formally appoint one or more suppliers. The key consideration should still be to appoint a supplier who can help youmeet your specific requirements – at the right price - not just one who can offer a variety of often impressive products andservices, some of which may not necessarily be relevant to your organisation.52