Tuning ICS Security Alerts: An Alarm Management Approach
There has been a lot of work, standards, such as ISA 18.2, and experience in managing ICS alarms. Chris Sistrunk of Mandiant looks at how that work and experience can be used to deal with the deluge of security alarms and events. The nuisance alarm problem is very similar to the nuisance security alert problem, and so are the solutions. Understanding the translation in language between these two related approaches can also help with buy in from different teams.