Does your small team also run a full-featured SOC that supports a global company? In this session we’ll show you how we’ve used Splunk Cloud and Splunk Enterprise Security to bring together all the relevant security intelligence from our technology stack, transforming our security operations from ad hoc and tactical to strategic and compliance-driven. We’ll discuss key takeaways from our journey, such as the benefits of ingesting data properly from the outset so you can reap the rewards as you scale; how we leverage multiple use cases out of single data sources; and how we created easy-to-understand visualizations that convey our firm’s security posture to management.

Speaker(s)
Edward Asiedu, Senior Professional Services Consultant, Splunk
Craig Gilliver, Head Of SecOps, Johnson Matthey

Slides PDF link - https://conf.splunk.com/files/2019/slides/SEC1511.pdf?podcast=1577146217

Product: Splunk Cloud, Splunk Enterprise Security, Phantom
Track: Security, Compliance and Fraud
Level: Good for all skill levels