Cybersecurity operations have evolved and matured over the past few years. The core functions of security operations, or SecOps, include endpoint and network incident detection, correlation of event data, and response and forensics work.

The rapid shift to the cloud, however, has brought even more changes to SecOps. In fact, we even have an emerging buzzword: CloudSecOps.

Let's start with definitions. SecOps is a combination of security and IT operations staff who monitor and assess risk and protect corporate assets.

CloudSecOps is an evolution of SecOps that focuses on building controls, implementing monitoring and enacting security response activities in cloud environments.

It's important to highlight three key differences between CloudSecOps and SecOps:

CloudSecOps teams are responsible for a range of functions. These responsibilities include the following:

In addition to the aforementioned responsibilities, CloudSecOps teams need to ensure security controls are embedded across the teams they work with. This includes, for example, working with DevOps and cloud engineering teams to embed controls into infrastructure-as-code templates. If the company's DevOps teams are responsible for implementing and maintaining their own security tools and controls, CloudSecOps teams need to help define standards and assist with monitoring and reporting capabilities.

SecOps and cybersecurity basics for NetOps teams

3 ways to apply security by design in the cloud

9 cloud migration security considerations and challenges

Juniper has added three features to its AIOps networking assistant to improve troubleshooting and give more insights into the ...

A Florida man has been charged with running a counterfeit operation that duped hospitals, schools, government agencies and the ...

Vendors are pushing heavily on the benefits of predictive analysis to automatically identify and remediate network issues. But ...

The credit union, one of the nation's largest, is using the Salesforce platform to deploy chatbots that can handle a growing set ...

The pandemic has sent many enterprises into survival mode, which altered the scope of the enterprise architect's role once again,...

Bellabeat is a women's health company that has added a private key encryption feature for app users to better protect their data.

PC manufacturers shipped fewer than 80 million computers for the first time in seven quarters as low demand and supply chain ...

The PC-as-a-service and device-as-a-service market is still developing and maturing, so organizations should learn who the major ...

When organizations consider upgrading to Windows 11, they need to compare the Windows 11 system requirements to their existing ...

SaaS licensing can be tricky to navigate, and a wrong choice could cost you. To get it right, examine the different types of ...

Walmart built its own cloud platform and tied it to two public cloud providers, creating a multi-cloud architecture that saved ...

FinOps promises to help organizations gain more value from their technology spending, especially in the cloud. Do you have the ...

Backup and recovery software provider Rubrik now sees itself as a cyber security company that helps organisations recover from ...

Veeam is looking to achieve an ‘outsized market-leading position’ by tapping its strengths in data protection and doubling down ...

The cyber threat landscape leaves firms with little room for error. In this handbook, focused on backup and recovery software in ...

All Rights Reserved, Copyright 2000 - 2022, TechTarget Privacy Policy Cookie Preferences Do Not Sell My Personal Info