How does network detection and response software (NDR) impact your org's reliance on other solutions for endpoint protection or SIEM?

Threat Intelligence & Incident Response Security Strategy & Roadmap

1.3k views2 Comments

Sort by:

CIO in Banking6 months ago

NDR collects NetFlow, and has it own use cases that enrich your SIEM, the end game would be saving the expensive EPS (Events Per Second) license on your SIEM and offloading that to NDR that is already collecting the bulk data and pushes only alerts to SIEM

COO in Finance (non-banking)6 months ago

In our case, it constrained our choice of vendors we could use for SIEM / MDR solutions to ensure they could integrate.

Content you might like

Should public companies be required to have at least one board member with cyber experience?

Yes72%

No16%

It depends on the size/industry10%

I’m not sure…

View Results

Do you currently have dedicated employees for offensive security (red teaming, pentesting, etc)?

Yes, one dedicated employee6%

Yes, multiple dedicated employees61%

No, but offensive security is covered by one or more employees as part of their role17%

No — we don’t handle offensive security internally11%

Other/don’t know6%

View Results

I'm looking to go for the Certified CISO certification & training as I'm an aspiring CISO. Any recommendations and additional certifications that I should be doing along with that? I already have CISSP.

We are looking for a solution to implement a chatGPT-like solution on premise? The solution should propose a GUI & back end components, ability to connect to LLM on prem and in the cloud (routing according to sensitivity of the data). Feature examples: questions to document/knowledge base, simple agent creation, RAG, and multimodal.

AI deepfakes have cost the industry over $200M this year. As CISOs, can we scale detection fast enough, or is regulatory pressure the only way to drive adoption?