Gartner report: The Five Characteristics of an Intelligence Driven Security Operations Center
In this report, Gartner documents enterprises are overly dependent on blocking and prevention mechanisms. Going forward, improved prevention, detection, response and prediction capabilities are all needed to deal with all types of attacks. The shift from traditional to intelligence driven SOC is rooted in continuous detection and response, adapting to findings and using intelligence and analytics to shape decision-making. Gartner provides guidance for security leaders in this report.