セキュリティ プログラムは、セキュリティ制御を SIEM に統合することにより、MTTR で 30% の改善を達成することができました。アナリストはツール間を行き来する必要がなくなりました。セキュリティ プログラムの動作を最もよく説明しているものは次のうちどれですか?
正解:D
A single pane of glass is a term that describes a unified view or interface that integrates multiple tools or data sources into one dashboard or console. A single pane of glass can help improve security operations by providing visibility, correlation, analysis, and alerting capabilities across various security controls and systems. A single pane of glass can also help reduce complexity, improve efficiency, and enhance decision making for security analysts. In this case, a security program was able to achieve a 30% improvement in MTTR by integrating security controls into a SIEM, which provides a single pane of glass for security operations. Official References:
https://www.eccouncil.org/cybersecurity-exchange/threat-intelligence/cyber-kill-chain-seven-steps-cyberattack