Preventive controls eventually fail, so organizations must be able to notice when something goes wrong. Logging records what happens, monitoring watches those records, and a security information and event management (SIEM) system brings them together so analysts can spot and investigate incidents.
Free account
Keep reading for free
Create a free StudyToCert account to read the rest of this lesson: 5 more sections, 6 key terms, a real-world example, an exam tip and self-check questions. Every lesson, lab and practice test is free with an account.