“When monitoring across networks and endpoints for signs of security threats such as intrusion attempts or data exfiltration, there are many opportunities for things to go wrong.

You need to decide what security data should be monitored and rank the potential data sets according to criticality. You must estimate how much data your current security infrastructure can handle and work those capabilities into your priorities.” – read at TechNative!