Question 75
Main Page
What should be the first step in establishing a security operations capability?
A. Hire forensic analysts
B. Define use cases
C. Identify organizational needs and risks
D. Purchase the most advanced SIEM
Answer: Identify organizational needs and risks
Operations must be tailored to the business. Identifying specific risks and needs ensures relevance and value.