Monitoring as part of cybersecurity

BY: Mauricio Flores Barcelata

Network Security Specialist

+20 experience developing skills in information technologies; management and designing security solutions, data centers and cybersecurity.

One of the important points to consider when establishing security policies in the IT infrastructure and due to the diversity of elements in either On-premise, cloud infrastructure or hybrid environments is monitoring.

Monitoring in the network infrastructure, in the security operating center, in the applications, in the databases, etc.

All the points where the process of a consultation, action or eventuality can be presented in the infrastructure. Considering the use of Cybersecurity that perform preventive or suspicious actions and report all the unusual movements that happen in these activities to take into account preventive or corrective actions at the appropriate time.

Why do we need to monitor?

Let us consider the guidelines that the activities to be carried out will give us and we will see how monitoring is a fundamental part of our environment in order to have a safe environment that is attended to any eventuality.

1.- Review the status of the services.

2.- Retrieve services

3.- Analyze trends

4.- Carry out audits of the use of services.

How do we do it?

In general, choose the necessary tools or solutions in the market where we can apply the four previous points.

1.- To check the status of the services, first, you have to parameterize and take into account a measurement that shows us the optimal state or how our service should work, and compare it with the current state of operation or how it is currently working.

2.- Retrieve services, refers to that, automatically or manually, modify the status of the service, if it did not meet our expectations when parameterizing the service. That is, using tools that automatically or manually help us “straighten out” the actions that our service should be performing and it does not.

Recover Automate system health, Real-time alerts

3.- With these data, we can observe how the expected result of our service is improving or worsening, hence it tends to improve or worsen the state of the service, therefore, if we see where our results tend, we can take operational actions real, correct and that fulfills the objective of the service, preventing errors or failures that harm the operation of the service.

Analyze trends Metrics, Record before and after (Dashboard)

4.- These improvements will continuously make there less errors, monitoring the behavior of the network security, applications or functions that we want to be carried out. From there, we can only continue with this continuous improvement, so we focus on conducting audits from time to time that we establish according to the monitoring carried out.