A library consortium’s SOC currently opens a few firewall logs when someone complains. Leadership wants continuous monitoring with measurable outcomes. What change best establishes that program?
Select an answer to reveal the explanation.
Short Explanation
Spot-checking logs when something feels wrong is like glancing at a smoke detector after you already smell smoke. Continuous monitoring means steady collection, alerts, and metrics you actually track.
Full Explanation
Continuous monitoring is an operations discipline that systematically collects and analyzes security-relevant data, generates alerts, and reviews performance against defined metrics—not occasional manual log glances. Municipal and consortium environments need agreed thresholds and ownership so coverage does not depend on complaint-driven attention. Metrics make gaps visible to leadership and auditors. Outsourcing without retained criteria still leaves the organization without a program it can govern.