CISSP Domain 7 — Security Operations

7.2 Conduct Logging and Monitoring Activities

Effective monitoring is the backbone of incident detection. By correlating logs, analyzing behaviors, and utilizing threat intelligence, organizations can identify and respond to threats before they escalate into major breaches.

• » Intrusion detection and prevention (IDPS)
• » Security information and event management (SIEM)
• » Continuous monitoring and tuning
• » Egress monitoring
• » Log management
• » Threat intelligence (e.g., threat feeds, threat hunting)
• » User and entity behavior analytics (UEBA)