In security, there is an emphasis on getting it right, but less so on the importance of speed. Similar to an aeroplane cockpit, where there are simulations from multiple screens, flashing lights and beeping noises, Security Operations Centres (SOC) often force analysts into a mindset of alert-driven security – but how do security professionals know that they are looking at the right thing?
