Security expert Andy Bochman offers some perspectives on security operations centers for utilities, such as why they're needed, priorities to consider and what the benefits can be.
It's a quick read and certainly food for thought.
Bochman argues that the need for security centers is, or ought to be, self-apparent, but he adds some other insights he's gathered from knowledgeable industry people.
Doug Graham, a senior director of information risk management for EMC, told Bochman that a good next step is to create the position of chief security officer or chief information security officer so one executive-level employee is responsible.
Bochman says Nicolas Fischbach of London-based Colt Telecom Services argued that a primary, not secondary, reason for having a security operations center is that it compels them to get a better picture than they have now of what's going in their system. They cannot secure it if they do not know enough about it.
