Security - Concept
SecOps
(Security Operations)
The day-to-day work of watching for security threats and keeping defences operating
What's it for?
Keeps day-to-day security tools and monitoring working so suspicious activity is noticed and handled.
For example…
A SecOps analyst investigates a burst of failed logins overnight, confirms it is a bot, and blocks the source before anyone is locked out
SecOps investigates an unusual login alert, checks endpoint and identity logs, blocks the compromised account and tunes the detection afterwards
Think of it like…
Building's security desk: cameras and locks help, but someone still has to watch the feeds and act