Notice: Function _load_textdomain_just_in_time was called incorrectly. Translation loading for the easy-accordion-free domain was triggered too early. This is usually an indicator for some code in the plugin or theme running too early. Translations should be loaded at the init action or later. Please see Debugging in WordPress for more information. (This message was added in version 6.7.0.) in /home/mother99/jacksonholdingcompany.com/wp-includes/functions.php on line 6114

Notice: Function _load_textdomain_just_in_time was called incorrectly. Translation loading for the zoho-flow domain was triggered too early. This is usually an indicator for some code in the plugin or theme running too early. Translations should be loaded at the init action or later. Please see Debugging in WordPress for more information. (This message was added in version 6.7.0.) in /home/mother99/jacksonholdingcompany.com/wp-includes/functions.php on line 6114

Notice: Function _load_textdomain_just_in_time was called incorrectly. Translation loading for the wordpress-seo domain was triggered too early. This is usually an indicator for some code in the plugin or theme running too early. Translations should be loaded at the init action or later. Please see Debugging in WordPress for more information. (This message was added in version 6.7.0.) in /home/mother99/jacksonholdingcompany.com/wp-includes/functions.php on line 6114

Warning: Cannot modify header information - headers already sent by (output started at /home/mother99/jacksonholdingcompany.com/wp-includes/functions.php:6114) in /home/mother99/jacksonholdingcompany.com/wp-includes/rest-api/class-wp-rest-server.php on line 1893

Warning: Cannot modify header information - headers already sent by (output started at /home/mother99/jacksonholdingcompany.com/wp-includes/functions.php:6114) in /home/mother99/jacksonholdingcompany.com/wp-includes/rest-api/class-wp-rest-server.php on line 1893

Warning: Cannot modify header information - headers already sent by (output started at /home/mother99/jacksonholdingcompany.com/wp-includes/functions.php:6114) in /home/mother99/jacksonholdingcompany.com/wp-includes/rest-api/class-wp-rest-server.php on line 1893

Warning: Cannot modify header information - headers already sent by (output started at /home/mother99/jacksonholdingcompany.com/wp-includes/functions.php:6114) in /home/mother99/jacksonholdingcompany.com/wp-includes/rest-api/class-wp-rest-server.php on line 1893

Warning: Cannot modify header information - headers already sent by (output started at /home/mother99/jacksonholdingcompany.com/wp-includes/functions.php:6114) in /home/mother99/jacksonholdingcompany.com/wp-includes/rest-api/class-wp-rest-server.php on line 1893

Warning: Cannot modify header information - headers already sent by (output started at /home/mother99/jacksonholdingcompany.com/wp-includes/functions.php:6114) in /home/mother99/jacksonholdingcompany.com/wp-includes/rest-api/class-wp-rest-server.php on line 1893

Warning: Cannot modify header information - headers already sent by (output started at /home/mother99/jacksonholdingcompany.com/wp-includes/functions.php:6114) in /home/mother99/jacksonholdingcompany.com/wp-includes/rest-api/class-wp-rest-server.php on line 1893

Warning: Cannot modify header information - headers already sent by (output started at /home/mother99/jacksonholdingcompany.com/wp-includes/functions.php:6114) in /home/mother99/jacksonholdingcompany.com/wp-includes/rest-api/class-wp-rest-server.php on line 1893
{"id":1963,"date":"2023-12-13T16:02:55","date_gmt":"2023-12-13T16:02:55","guid":{"rendered":"https:\/\/jacksonholdingcompany.com\/cisco-xdr-sleds-soc-in-a-box-norman-st-laurent-on-december-13-2023-at-100-pm\/"},"modified":"2023-12-13T16:02:55","modified_gmt":"2023-12-13T16:02:55","slug":"cisco-xdr-sleds-soc-in-a-box-norman-st-laurent-on-december-13-2023-at-100-pm","status":"publish","type":"post","link":"https:\/\/jacksonholdingcompany.com\/cisco-xdr-sleds-soc-in-a-box-norman-st-laurent-on-december-13-2023-at-100-pm\/","title":{"rendered":"Cisco XDR: SLEDs \u201cSOC in a Box\u201d Norman St. Laurent on December 13, 2023 at 1:00 pm"},"content":{"rendered":"

For State, Local, and Education (both Higher Ed and K-12) (SLED) entities the Security Operations Center (SOC) is a required tool in the toolbox and a necessity for Cyber Insurance.\u00a0 Threats to data \u2026 Read more on Cisco Blogs<\/a><\/p>\n

The cornerstone of a robust defense is the SOC. In this blog, we\u2019ll explore how Cisco XDR<\/a> simplifies and enhances the operations of SLED-focused SOCs, helping them achieve security and resilience goals in an open and collaborative manner.<\/p>\n

Watch the following video to learn more about Cisco XDR:<\/p>\n

[embedded content]<\/iframe><\/p>\n<h2><strong>Cisco XDR: A Game-Changer for SLED Entities \u2013 A \u201cSOC in a Box\u201d<\/strong><\/h2>\n<p>State and local governments, along with educational institutions, have increasingly become targets for cyber threats. These threats have the power to cause significant damage, and now use tactics and techniques that were once reserved for high-value targets.\u00a0 Cyberattacks like malware, ransomware, and phishing are increasing, and with 100,000 different local, state, law enforcement, tribal, townships, cities, municipalities, and county governments cyber criminals have a very big landscape to choose from in SLED. Current security tools struggle to detect and investigate sophisticated threat actors like BlackTech, Volt Typhoon or Wizard Spyder. Funding constraints also pose problems in SLED environments. This creates a situation where some of these entities are viewed as ripe for the picking by threat actors.<\/p>\n<h2><strong>Built for SecOps pros by SecOps pros<\/strong><\/h2>\n<p>Cisco XDR is a unified threat detection, investigation, mitigation, and hunting solution that integrates the entire Cisco security portfolio and select third-party tools \u2013 endpoint, email, network, and cloud, along with superior threat intelligence. Your teams can now go from endless investigation to remediating the highest priority incidents with greater speed, efficiency, and confidence.<\/p>\n<p>According to <a href=\"https:\/\/securityintelligence.com\/news\/cyberattacks-rise-sharply-against-governments-schools\/\">Security Intelligence<\/a>, the number of cyber-attacks targeting government agencies increased by 95% in 2022 compared to the previous year.\u00a0 The article also notes that in 2022, 89 education sector organizations fell victim to ransomware attacks impacting 45 school districts and 44 colleges and universities.<\/p>\n<p>Tight budgets within SLED limit their ability to build adequate defense in depth.\u00a0 Cisco XDR can quickly help provide a comprehensive solution that protects SLED environments against evolving cybersecurity challenges. By integrating detection and response capabilities, Cisco XDR simplifies SOC operations, enabling proactive threat mitigation.<\/p>\n<p>Cisco XDR is an affordable unified security solution that integrates and correlates data from multiple security products across an organization\u2019s networks, cloud, endpoints, email, and applications.\u00a0 It is a \u201cSOC in a Box\u201d that helps security operation teams to detect, prioritize, and respond to threats efficiently.<\/p>\n<h2><strong>The Growing Need for Extended Detection and Response<\/strong><\/h2>\n<p>Agencies and departments now use more devices, applications, and tools than ever before, and this complexity has created a persistent and growing security challenge. \u00a0\u00a0The typical SLED detection and response model is built upon self-contained point security solutions, which are pieced together and require lots of staffing resources to maintain.\u00a0 To this point, these traditional security measures are no longer sufficient to combat advanced threats. SLED entities need an XDR approach that goes beyond mere detection. Security leadership and their teams are demanding better efficacy, experience and higher ROI.<\/p>\n<p>Cisco XDR steps in as the all-inclusive solution for identifying, investigating, and remediating threats. Cisco XDR is comprehensive, providing prioritized and contextualized telemetry, and actionable insight on what steps can be immediately taken. Cisco XDR improves visibility and creates true context across an environment, while enabling unified detection from a single investigative viewpoint that supports fast accurate threat response. Cisco XDR also elevates productivity even further through automation and orchestration, and includes other advanced user-friendly SOC necessities such as:<\/p>\n<p>Playbook driven automation<br \/>\nGuided incident response<br \/>\nThreat hunting<br \/>\nAlert prioritization, and<br \/>\nBreach pattern analysis.<\/p>\n<p>This \u201cSOC in a Box\u201d immediately gives SLED SOC environments improved advanced threat detection, response efficiency, and investigation powers.<\/p>\n<p>Automation and orchestration are essential concepts in the field of computer and network security, particularly from a Security Operations Center (SOC) point of view. These concepts help SOC teams streamline their processes, improve response times, and enhance overall security posture. Here\u2019s a breakdown of what automation and orchestration mean in the context of a SOC in a SLED environment:<\/p>\n<h3><strong>Automation<\/strong><\/h3>\n<p>Automation in a SOC refers to the use of technology and scripts to perform repetitive and predefined tasks without manual intervention. These tasks can include activities such as log analysis, threat detection, incident response, and vulnerability scanning. The goal of automation is to reduce the workload on security analysts and speed up the detection and response to security incidents. Automation can handle routine, well-defined tasks, allowing human analysts to focus on more complex and strategic aspects of security.<\/p>\n<p>Examples of automated tasks in a SOC include automatically blocking IP addresses associated with malicious activity, generating alerts, and enriching security alerts with additional context (from additional security tools).<\/p>\n<h3><strong>Orchestration<\/strong><\/h3>\n<p>Orchestration goes a step further than automation by integrating various security tools, processes, and workflows into a coordinated and streamlined system. It involves creating workflows and playbooks that define how different security tools and processes should work together to respond to specific security incidents.\u00a0 Orchestration aims to ensure that different security solutions communicate and collaborate effectively. It includes connecting various security technologies.\u00a0 SOC orchestration helps improve response coordination, reduces the likelihood of errors, and enhances overall security incident management by providing a standardized, repeatable process for incident response.<\/p>\n<h3><strong>Cisco\u2019s Open Approach to XDR<\/strong><\/h3>\n<p>What sets Cisco XDR apart is its open and collaborative approach. Rather than relying on closed, proprietary systems, Cisco embraces interoperability. This means that SLED SOC environments can integrate Cisco XDR into their existing ecosystems, ensuring a seamless and efficient security framework that works in harmony with other tools and technologies.\u00a0 SLED entities cannot afford clunky vender integrations that make It harder and more time consuming for SOC analysts to investigate.<\/p>\n<p>Cisco XDR is an open extensible solution, with turnkey integrations with a variety of third-party vendors allowing security operation teams to quickly adopt a unified and simple approach to their security across their security stack.<\/p>\n<h3><strong>Building an Effective XDR Solution<\/strong><\/h3>\n<p>An effective XDR solution requires multiple sources of telemetry and up-to-the-minute threat intelligence. <a href=\"https:\/\/www.talosintelligence.com\/\">Cisco Talos,<\/a> the world-renowned threat intelligence research team provides this crucial data. By leveraging these sources, Cisco XDR helps SLED SOC teams detect and prioritize threats more effectively. Now, streamlined investigations and rapid threat remediation have become standard operating procedures.<\/p>\n<h3><strong>XDR and Cyber Insurance for SLED Entities<\/strong><\/h3>\n<p>Cyber insurance offers financial protection against losses incurred due to cyber-related incidents. The implementation of XDR solutions like Cisco XDR can significantly impact cyber insurance premiums and coverage for SLED entities. It demonstrates a proactive approach to security, which insurers often reward.<\/p>\n<h2><strong>Conclusion<\/strong><\/h2>\n<p>Operating a SOC in a SLED environment requires adherence to best practices. These practices include robust incident response strategies, and comprehensive threat detection.<\/p>\n<p>For SLED entities, the \u201cSOC in a BOX\u201d concept is not just an idea; it\u2019s real with Cisco XDR.\u00a0 Cisco XDR is a practical approach to safeguarding the data and operations of State, Local, and Education entities, including law enforcement. It was designed to help SOC analysts detect and respond to threats more quickly and effectively by providing a unified view of security data across multiple security tools and data sources.<\/p>\n<p>SLED SOC teams can have their analyst <em>at any skill level<\/em> perform advanced tasks elevating productivity and improving decision making times.<\/p>\n<p>Cisco XDR is at the forefront of this \u201cSOC in a BOX\u201d transformation, providing SLED SOC teams with the tools they need to stay ahead of the ever-evolving cybersecurity threats. With an open approach, effective threat detection, and important considerations for cyber insurance, Cisco XDR is that tool in the toolbox SLED entities need in their quest for a secure and resilient future.<\/p>\n<h3><strong>Related Links \/ Resources<\/strong><\/h3>\n<p><a href=\"https:\/\/www.cisco.com\/c\/en\/us\/products\/security\/cisco-xdr-security-operations-simplified-ebook.html?utm_medium=web-referral&utm_source=blog&utm_campaign=XDR-FY23-Q3-Content-Ebook-Security-Operations-Simplified&utm_term=pgm\">Cisco XDR: Security Operations Simplified eBook<\/a><br \/>\n<a href=\"https:\/\/www.cisco.com\/c\/en\/us\/products\/collateral\/security\/xdr\/xdr-primer-simplifying-security-operations.html?CCID=cc002757&OID=rptsc031083&DTID=oblgcdc000651\">An XDR Primer: The Promise of Simplifying Security Operations<\/a><br \/>\n<a href=\"https:\/\/www.cisco.com\/c\/en\/us\/products\/collateral\/security\/xdr\/xdr-premier-aag.pdf\">Cisco XDR: At a Glance<\/a> (pdf)<br \/>\n<a href=\"https:\/\/www.cisco.com\/c\/dam\/en\/us\/products\/collateral\/security\/xdr\/more-than-just-another-secops-tool.pdf\" target=\"_blank\" rel=\"noopener\">XDR: More than just another SecOps Tool<\/a> (pdf)<\/p>\n<p><em>We\u2019d love to hear what you think. Ask a Question, Comment Below, and Stay Connected with Cisco Security on social!<\/em><\/p>\n<p><strong>Cisco Security Social Channels<\/strong><\/p>\n<p><strong><a href=\"https:\/\/www.instagram.com\/CiscoSecure\/\" target=\"_blank\" rel=\"noopener\">Instagram<\/a><\/strong><strong><a href=\"https:\/\/www.facebook.com\/ciscosecure\/\" target=\"_blank\" rel=\"noopener\">Facebook<\/a><\/strong><strong><a href=\"https:\/\/twitter.com\/CiscoSecure\" target=\"_blank\" rel=\"noopener\">Twitter<\/a><\/strong><strong><a href=\"https:\/\/www.linkedin.com\/showcase\/cisco-secure\" target=\"_blank\" rel=\"noopener\">LinkedIn<\/a><\/strong><\/p>\n<div>\n\t\tShare\n<div class=\"twitter\">\n<div class=\"box\"><\/div>\n<\/div>\n<div class=\"facebook\">\n<div class=\"box\">\n\t\t<a class=\"share\" href=\"http:\/\/www.facebook.com\/sharer\/sharer.php?u=https:\/\/blogs.cisco.com\/security\/cisco-xdr-sleds-soc-in-a-box&title=Cisco%20XDR:%20SLEDs%20%E2%80%9CSOC%20in%20a%20Box%E2%80%9D\"><\/a>\n\t<\/div>\n<\/div>\n<div class=\"linkedin\">\n<div class=\"box\">\n\t\t<a class=\"share\" href=\"https:\/\/www.linkedin.com\/cws\/share?url=https:\/\/blogs.cisco.com\/security\/cisco-xdr-sleds-soc-in-a-box\"><\/a>\n\t<\/div>\n<\/div>\n<div class=\"mail\">\n<div class=\"box\">\n\t<a class=\"share\" href=\"mailto:?subject=Cisco%20Blog:%20Cisco%20XDR:%20SLEDs%20%E2%80%9CSOC%20in%20a%20Box%E2%80%9D&body=I%20saw%20this%20post%20on%20Cisco%20Blogs%20and%20thought%20you%20might%20like%20to%20read%20it.%0A%0ACisco%20XDR:%20SLEDs%20%E2%80%9CSOC%20in%20a%20Box%E2%80%9D%0A%0Ahttps:\/\/blogs.cisco.com\/security\/cisco-xdr-sleds-soc-in-a-box%0A%0A****Disclaimer****%0A%0ACisco%20is%20not%20responsible%20for%20the%20content%20of%20this%20email,%20and%20its%20contents%20do%20not%20necessarily%20reflect%20Cisco%E2%80%99s%20views%20or%20opinions.%20Cisco%20has%20not%20verified%20the%20email%20address%20or%20name%20of%20the%20sender.\"> <\/a>\n\t<\/div>\n<\/div>\n<\/div>\n<div class=\"share_text\">Share:<\/div>\n<div>\n<div class=\"twitter\">\n<div class=\"box\"><\/div>\n<\/div>\n<div class=\"facebook\">\n<div class=\"box\">\n\t\t<a class=\"share\" href=\"http:\/\/www.facebook.com\/sharer\/sharer.php?u=https:\/\/blogs.cisco.com\/security\/cisco-xdr-sleds-soc-in-a-box&title=Cisco%20XDR:%20SLEDs%20%E2%80%9CSOC%20in%20a%20Box%E2%80%9D\"><\/a>\n\t<\/div>\n<\/div>\n<div class=\"linkedin\">\n<div class=\"box\">\n\t\t<a class=\"share\" href=\"https:\/\/www.linkedin.com\/cws\/share?url=https:\/\/blogs.cisco.com\/security\/cisco-xdr-sleds-soc-in-a-box\"><\/a>\n\t<\/div>\n<\/div>\n<div class=\"mail\">\n<div class=\"box\">\n\t<a class=\"share\" href=\"mailto:?subject=Cisco%20Blog:%20Cisco%20XDR:%20SLEDs%20%E2%80%9CSOC%20in%20a%20Box%E2%80%9D&body=I%20saw%20this%20post%20on%20Cisco%20Blogs%20and%20thought%20you%20might%20like%20to%20read%20it.%0A%0ACisco%20XDR:%20SLEDs%20%E2%80%9CSOC%20in%20a%20Box%E2%80%9D%0A%0Ahttps:\/\/blogs.cisco.com\/security\/cisco-xdr-sleds-soc-in-a-box%0A%0A****Disclaimer****%0A%0ACisco%20is%20not%20responsible%20for%20the%20content%20of%20this%20email,%20and%20its%20contents%20do%20not%20necessarily%20reflect%20Cisco%E2%80%99s%20views%20or%20opinions.%20Cisco%20has%20not%20verified%20the%20email%20address%20or%20name%20of%20the%20sender.\"> <\/a>\n\t<\/div>\n<\/div>\n<\/div>\n<p>\u00a0\u00a0Learn how Cisco XDR simplifies and enhances the operations of SLED-focused SOCs, helping them achieve their security resilience goals.\u00a0\u00a0<a href=\"https:\/\/feedpress.me\/link\/23532\/16494117\/cisco-xdr-sleds-soc-in-a-box\" target=\"_blank\" class=\"feedzy-rss-link-icon\" rel=\"noopener\">Read More<\/a>\u00a0Cisco Blogs\u00a0<\/p>","protected":false},"excerpt":{"rendered":"<p><\/p>\n<p>For State, Local, and Education (both Higher Ed and K-12) (SLED) entities the Security Operations Center (SOC) is a required tool in the toolbox and a necessity for Cyber Insurance.\u00a0 Threats to data \u2026 <a href=\"https:\/\/blogs.cisco.com\/security\/cisco-xdr-sleds-soc-in-a-box?utm_medium=feed&utm_source=feedpress.me&utm_campaign=Feed%3A+CiscoBlogs\">Read more on Cisco Blogs<\/a><\/p>\n<p>\u200b<\/p>\n<p>For State, Local, and Education (both Higher Ed and K-12) (SLED) entities the Security Operations Center (SOC) is a required tool in the toolbox and a necessity for Cyber Insurance.\u00a0 Threats to data and information are ever evolving, and better safeguarding the security of SLED entities is a must.<\/p>\n<p>The cornerstone of a robust defense is the SOC. In this blog, we\u2019ll explore how <a href=\"https:\/\/www.cisco.com\/site\/us\/en\/products\/security\/xdr\/index.html#tabs-ca9b217826-item-1b113ceb83-tab\">Cisco XDR<\/a> simplifies and enhances the operations of SLED-focused SOCs, helping them achieve security and resilience goals in an open and collaborative manner.<\/p>\n<p>Watch the following video to learn more about Cisco XDR:<\/p>\n<p><iframe src=\"https:\/\/players.brightcove.net\/1384193102001\/41XYD7gTx_default\/index.html?videoId=6322229984112\" allowfullscreen=\"allowfullscreen\" width=\"640\" height=\"360\">[embedded content]<\/iframe><\/p>\n<h2><strong>Cisco XDR: A Game-Changer for SLED Entities \u2013 A \u201cSOC in a Box\u201d<\/strong><\/h2>\n<p>State and local governments, along with educational institutions, have increasingly become targets for cyber threats. These threats have the power to cause significant damage, and now use tactics and techniques that were once reserved for high-value targets.\u00a0 Cyberattacks like malware, ransomware, and phishing are increasing, and with 100,000 different local, state, law enforcement, tribal, townships, cities, municipalities, and county governments cyber criminals have a very big landscape to choose from in SLED. Current security tools struggle to detect and investigate sophisticated threat actors like BlackTech, Volt Typhoon or Wizard Spyder. Funding constraints also pose problems in SLED environments. This creates a situation where some of these entities are viewed as ripe for the picking by threat actors.<\/p>\n<h2><strong>Built for SecOps pros by SecOps pros<\/strong><\/h2>\n<p>Cisco XDR is a unified threat detection, investigation, mitigation, and hunting solution that integrates the entire Cisco security portfolio and select third-party tools \u2013 endpoint, email, network, and cloud, along with superior threat intelligence. Your teams can now go from endless investigation to remediating the highest priority incidents with greater speed, efficiency, and confidence.<\/p>\n<p>According to <a href=\"https:\/\/securityintelligence.com\/news\/cyberattacks-rise-sharply-against-governments-schools\/\">Security Intelligence<\/a>, the number of cyber-attacks targeting government agencies increased by 95% in 2022 compared to the previous year.\u00a0 The article also notes that in 2022, 89 education sector organizations fell victim to ransomware attacks impacting 45 school districts and 44 colleges and universities.<\/p>\n<p>Tight budgets within SLED limit their ability to build adequate defense in depth.\u00a0 Cisco XDR can quickly help provide a comprehensive solution that protects SLED environments against evolving cybersecurity challenges. By integrating detection and response capabilities, Cisco XDR simplifies SOC operations, enabling proactive threat mitigation.<\/p>\n<p>Cisco XDR is an affordable unified security solution that integrates and correlates data from multiple security products across an organization\u2019s networks, cloud, endpoints, email, and applications.\u00a0 It is a \u201cSOC in a Box\u201d that helps security operation teams to detect, prioritize, and respond to threats efficiently.<\/p>\n<h2><strong>The Growing Need for Extended Detection and Response<\/strong><\/h2>\n<p>Agencies and departments now use more devices, applications, and tools than ever before, and this complexity has created a persistent and growing security challenge. \u00a0\u00a0The typical SLED detection and response model is built upon self-contained point security solutions, which are pieced together and require lots of staffing resources to maintain.\u00a0 To this point, these traditional security measures are no longer sufficient to combat advanced threats. SLED entities need an XDR approach that goes beyond mere detection. Security leadership and their teams are demanding better efficacy, experience and higher ROI.<\/p>\n<p>Cisco XDR steps in as the all-inclusive solution for identifying, investigating, and remediating threats. Cisco XDR is comprehensive, providing prioritized and contextualized telemetry, and actionable insight on what steps can be immediately taken. Cisco XDR improves visibility and creates true context across an environment, while enabling unified detection from a single investigative viewpoint that supports fast accurate threat response. Cisco XDR also elevates productivity even further through automation and orchestration, and includes other advanced user-friendly SOC necessities such as:<\/p>\n<p>Playbook driven automation<br \/>\nGuided incident response<br \/>\nThreat hunting<br \/>\nAlert prioritization, and<br \/>\nBreach pattern analysis.<\/p>\n<p>This \u201cSOC in a Box\u201d immediately gives SLED SOC environments improved advanced threat detection, response efficiency, and investigation powers.<\/p>\n<p>Automation and orchestration are essential concepts in the field of computer and network security, particularly from a Security Operations Center (SOC) point of view. These concepts help SOC teams streamline their processes, improve response times, and enhance overall security posture. Here\u2019s a breakdown of what automation and orchestration mean in the context of a SOC in a SLED environment:<\/p>\n<h3><strong>Automation<\/strong><\/h3>\n<p>Automation in a SOC refers to the use of technology and scripts to perform repetitive and predefined tasks without manual intervention. These tasks can include activities such as log analysis, threat detection, incident response, and vulnerability scanning. The goal of automation is to reduce the workload on security analysts and speed up the detection and response to security incidents. Automation can handle routine, well-defined tasks, allowing human analysts to focus on more complex and strategic aspects of security.<\/p>\n<p>Examples of automated tasks in a SOC include automatically blocking IP addresses associated with malicious activity, generating alerts, and enriching security alerts with additional context (from additional security tools).<\/p>\n<h3><strong>Orchestration<\/strong><\/h3>\n<p>Orchestration goes a step further than automation by integrating various security tools, processes, and workflows into a coordinated and streamlined system. It involves creating workflows and playbooks that define how different security tools and processes should work together to respond to specific security incidents.\u00a0 Orchestration aims to ensure that different security solutions communicate and collaborate effectively. It includes connecting various security technologies.\u00a0 SOC orchestration helps improve response coordination, reduces the likelihood of errors, and enhances overall security incident management by providing a standardized, repeatable process for incident response.<\/p>\n<h3><strong>Cisco\u2019s Open Approach to XDR<\/strong><\/h3>\n<p>What sets Cisco XDR apart is its open and collaborative approach. Rather than relying on closed, proprietary systems, Cisco embraces interoperability. This means that SLED SOC environments can integrate Cisco XDR into their existing ecosystems, ensuring a seamless and efficient security framework that works in harmony with other tools and technologies.\u00a0 SLED entities cannot afford clunky vender integrations that make It harder and more time consuming for SOC analysts to investigate.<\/p>\n<p>Cisco XDR is an open extensible solution, with turnkey integrations with a variety of third-party vendors allowing security operation teams to quickly adopt a unified and simple approach to their security across their security stack.<\/p>\n<h3><strong>Building an Effective XDR Solution<\/strong><\/h3>\n<p>An effective XDR solution requires multiple sources of telemetry and up-to-the-minute threat intelligence. <a href=\"https:\/\/www.talosintelligence.com\/\">Cisco Talos,<\/a> the world-renowned threat intelligence research team provides this crucial data. By leveraging these sources, Cisco XDR helps SLED SOC teams detect and prioritize threats more effectively. Now, streamlined investigations and rapid threat remediation have become standard operating procedures.<\/p>\n<h3><strong>XDR and Cyber Insurance for SLED Entities<\/strong><\/h3>\n<p>Cyber insurance offers financial protection against losses incurred due to cyber-related incidents. The implementation of XDR solutions like Cisco XDR can significantly impact cyber insurance premiums and coverage for SLED entities. It demonstrates a proactive approach to security, which insurers often reward.<\/p>\n<h2><strong>Conclusion<\/strong><\/h2>\n<p>Operating a SOC in a SLED environment requires adherence to best practices. These practices include robust incident response strategies, and comprehensive threat detection.<\/p>\n<p>For SLED entities, the \u201cSOC in a BOX\u201d concept is not just an idea; it\u2019s real with Cisco XDR.\u00a0 Cisco XDR is a practical approach to safeguarding the data and operations of State, Local, and Education entities, including law enforcement. It was designed to help SOC analysts detect and respond to threats more quickly and effectively by providing a unified view of security data across multiple security tools and data sources.<\/p>\n<p>SLED SOC teams can have their analyst <em>at any skill level<\/em> perform advanced tasks elevating productivity and improving decision making times.<\/p>\n<p>Cisco XDR is at the forefront of this \u201cSOC in a BOX\u201d transformation, providing SLED SOC teams with the tools they need to stay ahead of the ever-evolving cybersecurity threats. With an open approach, effective threat detection, and important considerations for cyber insurance, Cisco XDR is that tool in the toolbox SLED entities need in their quest for a secure and resilient future.<\/p>\n<h3><strong>Related Links \/ Resources<\/strong><\/h3>\n<p><a href=\"https:\/\/www.cisco.com\/c\/en\/us\/products\/security\/cisco-xdr-security-operations-simplified-ebook.html?utm_medium=web-referral&utm_source=blog&utm_campaign=XDR-FY23-Q3-Content-Ebook-Security-Operations-Simplified&utm_term=pgm\">Cisco XDR: Security Operations Simplified eBook<\/a><br \/>\n<a href=\"https:\/\/www.cisco.com\/c\/en\/us\/products\/collateral\/security\/xdr\/xdr-primer-simplifying-security-operations.html?CCID=cc002757&OID=rptsc031083&DTID=oblgcdc000651\">An XDR Primer: The Promise of Simplifying Security Operations<\/a><br \/>\n<a href=\"https:\/\/www.cisco.com\/c\/en\/us\/products\/collateral\/security\/xdr\/xdr-premier-aag.pdf\">Cisco XDR: At a Glance<\/a> (pdf)<br \/>\n<a href=\"https:\/\/www.cisco.com\/c\/dam\/en\/us\/products\/collateral\/security\/xdr\/more-than-just-another-secops-tool.pdf\" target=\"_blank\" rel=\"noopener\">XDR: More than just another SecOps Tool<\/a> (pdf)<\/p>\n<p><em>We\u2019d love to hear what you think. Ask a Question, Comment Below, and Stay Connected with Cisco Security on social!<\/em><\/p>\n<p><strong>Cisco Security Social Channels<\/strong><\/p>\n<p><strong><a href=\"https:\/\/www.instagram.com\/CiscoSecure\/\" target=\"_blank\" rel=\"noopener\">Instagram<\/a><\/strong><strong><a href=\"https:\/\/www.facebook.com\/ciscosecure\/\" target=\"_blank\" rel=\"noopener\">Facebook<\/a><\/strong><strong><a href=\"https:\/\/twitter.com\/CiscoSecure\" target=\"_blank\" rel=\"noopener\">Twitter<\/a><\/strong><strong><a href=\"https:\/\/www.linkedin.com\/showcase\/cisco-secure\" target=\"_blank\" rel=\"noopener\">LinkedIn<\/a><\/strong><\/p>\n<div>\n\t\tShare<\/p>\n<div class=\"twitter\">\n<div class=\"box\"><\/div>\n<\/div>\n<div class=\"facebook\">\n<div class=\"box\">\n\t\t<a class=\"share\" href=\"http:\/\/www.facebook.com\/sharer\/sharer.php?u=https:\/\/blogs.cisco.com\/security\/cisco-xdr-sleds-soc-in-a-box&title=Cisco%20XDR:%20SLEDs%20%E2%80%9CSOC%20in%20a%20Box%E2%80%9D\"><\/a>\n\t<\/div>\n<\/div>\n<div class=\"linkedin\">\n<div class=\"box\">\n\t\t<a class=\"share\" href=\"https:\/\/www.linkedin.com\/cws\/share?url=https:\/\/blogs.cisco.com\/security\/cisco-xdr-sleds-soc-in-a-box\"><\/a>\n\t<\/div>\n<\/div>\n<div class=\"mail\">\n<div class=\"box\">\n\t<a class=\"share\" href=\"mailto:?subject=Cisco%20Blog:%20Cisco%20XDR:%20SLEDs%20%E2%80%9CSOC%20in%20a%20Box%E2%80%9D&body=I%20saw%20this%20post%20on%20Cisco%20Blogs%20and%20thought%20you%20might%20like%20to%20read%20it.%0A%0ACisco%20XDR:%20SLEDs%20%E2%80%9CSOC%20in%20a%20Box%E2%80%9D%0A%0Ahttps:\/\/blogs.cisco.com\/security\/cisco-xdr-sleds-soc-in-a-box%0A%0A****Disclaimer****%0A%0ACisco%20is%20not%20responsible%20for%20the%20content%20of%20this%20email,%20and%20its%20contents%20do%20not%20necessarily%20reflect%20Cisco%E2%80%99s%20views%20or%20opinions.%20Cisco%20has%20not%20verified%20the%20email%20address%20or%20name%20of%20the%20sender.\"> <\/a>\n\t<\/div>\n<\/div>\n<\/div>\n<div class=\"share_text\">Share:<\/div>\n<div>\n<div class=\"twitter\">\n<div class=\"box\"><\/div>\n<\/div>\n<div class=\"facebook\">\n<div class=\"box\">\n\t\t<a class=\"share\" href=\"http:\/\/www.facebook.com\/sharer\/sharer.php?u=https:\/\/blogs.cisco.com\/security\/cisco-xdr-sleds-soc-in-a-box&title=Cisco%20XDR:%20SLEDs%20%E2%80%9CSOC%20in%20a%20Box%E2%80%9D\"><\/a>\n\t<\/div>\n<\/div>\n<div class=\"linkedin\">\n<div class=\"box\">\n\t\t<a class=\"share\" href=\"https:\/\/www.linkedin.com\/cws\/share?url=https:\/\/blogs.cisco.com\/security\/cisco-xdr-sleds-soc-in-a-box\"><\/a>\n\t<\/div>\n<\/div>\n<div class=\"mail\">\n<div class=\"box\">\n\t<a class=\"share\" href=\"mailto:?subject=Cisco%20Blog:%20Cisco%20XDR:%20SLEDs%20%E2%80%9CSOC%20in%20a%20Box%E2%80%9D&body=I%20saw%20this%20post%20on%20Cisco%20Blogs%20and%20thought%20you%20might%20like%20to%20read%20it.%0A%0ACisco%20XDR:%20SLEDs%20%E2%80%9CSOC%20in%20a%20Box%E2%80%9D%0A%0Ahttps:\/\/blogs.cisco.com\/security\/cisco-xdr-sleds-soc-in-a-box%0A%0A****Disclaimer****%0A%0ACisco%20is%20not%20responsible%20for%20the%20content%20of%20this%20email,%20and%20its%20contents%20do%20not%20necessarily%20reflect%20Cisco%E2%80%99s%20views%20or%20opinions.%20Cisco%20has%20not%20verified%20the%20email%20address%20or%20name%20of%20the%20sender.\"> <\/a>\n\t<\/div>\n<\/div>\n<\/div>\n<p>\u00a0\u00a0Learn how Cisco XDR simplifies and enhances the operations of SLED-focused SOCs, helping them achieve their security resilience goals.\u00a0\u00a0<a href=\"https:\/\/feedpress.me\/link\/23532\/16494117\/cisco-xdr-sleds-soc-in-a-box\" target=\"_blank\" class=\"feedzy-rss-link-icon\" rel=\"noopener\">Read More<\/a>\u00a0Cisco Blogs\u00a0<\/p>\n<p><\/p>\n","protected":false},"author":0,"featured_media":1964,"comment_status":"","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[12],"tags":[],"class_list":["post-1963","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cisco-learning"],"yoast_head":"\n<title>Cisco XDR: SLEDs \u201cSOC in a Box\u201d Norman St. Laurent on December 13, 2023 at 1:00 pm - JHC<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/jacksonholdingcompany.com\/cisco-xdr-sleds-soc-in-a-box-norman-st-laurent-on-december-13-2023-at-100-pm\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Cisco XDR: SLEDs \u201cSOC in a Box\u201d Norman St. Laurent on December 13, 2023 at 1:00 pm\" \/>\n<meta property=\"og:description\" content=\"For State, Local, and Education (both Higher Ed and K-12) (SLED) entities the Security Operations Center (SOC) is a required tool in the toolbox and a necessity for Cyber Insurance.\u00a0 Threats to data \u2026 Read more on Cisco Blogs \u200b For State, Local, and Education (both Higher Ed and K-12) (SLED) entities the Security Operations Center (SOC) is a required tool in the toolbox and a necessity for Cyber Insurance.\u00a0 Threats to data and information are ever evolving, and better safeguarding the security of SLED entities is a must. The cornerstone of a robust defense is the SOC. In this blog, we\u2019ll explore how Cisco XDR simplifies and enhances the operations of SLED-focused SOCs, helping them achieve security and resilience goals in an open and collaborative manner. Watch the following video to learn more about Cisco XDR: [embedded content] Cisco XDR: A Game-Changer for SLED Entities \u2013 A \u201cSOC in a Box\u201d State and local governments, along with educational institutions, have increasingly become targets for cyber threats. These threats have the power to cause significant damage, and now use tactics and techniques that were once reserved for high-value targets.\u00a0 Cyberattacks like malware, ransomware, and phishing are increasing, and with 100,000 different local, state, law enforcement, tribal, townships, cities, municipalities, and county governments cyber criminals have a very big landscape to choose from in SLED. Current security tools struggle to detect and investigate sophisticated threat actors like BlackTech, Volt Typhoon or Wizard Spyder. Funding constraints also pose problems in SLED environments. This creates a situation where some of these entities are viewed as ripe for the picking by threat actors. Built for SecOps pros by SecOps pros Cisco XDR is a unified threat detection, investigation, mitigation, and hunting solution that integrates the entire Cisco security portfolio and select third-party tools \u2013 endpoint, email, network, and cloud, along with superior threat intelligence. Your teams can now go from endless investigation to remediating the highest priority incidents with greater speed, efficiency, and confidence. According to Security Intelligence, the number of cyber-attacks targeting government agencies increased by 95% in 2022 compared to the previous year.\u00a0 The article also notes that in 2022, 89 education sector organizations fell victim to ransomware attacks impacting 45 school districts and 44 colleges and universities. Tight budgets within SLED limit their ability to build adequate defense in depth.\u00a0 Cisco XDR can quickly help provide a comprehensive solution that protects SLED environments against evolving cybersecurity challenges. By integrating detection and response capabilities, Cisco XDR simplifies SOC operations, enabling proactive threat mitigation. Cisco XDR is an affordable unified security solution that integrates and correlates data from multiple security products across an organization\u2019s networks, cloud, endpoints, email, and applications.\u00a0 It is a \u201cSOC in a Box\u201d that helps security operation teams to detect, prioritize, and respond to threats efficiently. The Growing Need for Extended Detection and Response Agencies and departments now use more devices, applications, and tools than ever before, and this complexity has created a persistent and growing security challenge. \u00a0\u00a0The typical SLED detection and response model is built upon self-contained point security solutions, which are pieced together and require lots of staffing resources to maintain.\u00a0 To this point, these traditional security measures are no longer sufficient to combat advanced threats. SLED entities need an XDR approach that goes beyond mere detection. Security leadership and their teams are demanding better efficacy, experience and higher ROI. Cisco XDR steps in as the all-inclusive solution for identifying, investigating, and remediating threats. Cisco XDR is comprehensive, providing prioritized and contextualized telemetry, and actionable insight on what steps can be immediately taken. Cisco XDR improves visibility and creates true context across an environment, while enabling unified detection from a single investigative viewpoint that supports fast accurate threat response. Cisco XDR also elevates productivity even further through automation and orchestration, and includes other advanced user-friendly SOC necessities such as: Playbook driven automation Guided incident response Threat hunting Alert prioritization, and Breach pattern analysis. This \u201cSOC in a Box\u201d immediately gives SLED SOC environments improved advanced threat detection, response efficiency, and investigation powers. Automation and orchestration are essential concepts in the field of computer and network security, particularly from a Security Operations Center (SOC) point of view. These concepts help SOC teams streamline their processes, improve response times, and enhance overall security posture. Here\u2019s a breakdown of what automation and orchestration mean in the context of a SOC in a SLED environment: Automation Automation in a SOC refers to the use of technology and scripts to perform repetitive and predefined tasks without manual intervention. These tasks can include activities such as log analysis, threat detection, incident response, and vulnerability scanning. The goal of automation is to reduce the workload on security analysts and speed up the detection and response to security incidents. Automation can handle routine, well-defined tasks, allowing human analysts to focus on more complex and strategic aspects of security. Examples of automated tasks in a SOC include automatically blocking IP addresses associated with malicious activity, generating alerts, and enriching security alerts with additional context (from additional security tools). Orchestration Orchestration goes a step further than automation by integrating various security tools, processes, and workflows into a coordinated and streamlined system. It involves creating workflows and playbooks that define how different security tools and processes should work together to respond to specific security incidents.\u00a0 Orchestration aims to ensure that different security solutions communicate and collaborate effectively. It includes connecting various security technologies.\u00a0 SOC orchestration helps improve response coordination, reduces the likelihood of errors, and enhances overall security incident management by providing a standardized, repeatable process for incident response. Cisco\u2019s Open Approach to XDR What sets Cisco XDR apart is its open and collaborative approach. Rather than relying on closed, proprietary systems, Cisco embraces interoperability. This means that SLED SOC environments can integrate Cisco XDR into their existing ecosystems, ensuring a seamless and efficient security framework that works in harmony with other tools and technologies.\u00a0 SLED entities cannot afford clunky vender integrations that make It harder and more time consuming for SOC analysts to investigate. Cisco XDR is an open extensible solution, with turnkey integrations with a variety of third-party vendors allowing security operation teams to quickly adopt a unified and simple approach to their security across their security stack. Building an Effective XDR Solution An effective XDR solution requires multiple sources of telemetry and up-to-the-minute threat intelligence. Cisco Talos, the world-renowned threat intelligence research team provides this crucial data. By leveraging these sources, Cisco XDR helps SLED SOC teams detect and prioritize threats more effectively. Now, streamlined investigations and rapid threat remediation have become standard operating procedures. XDR and Cyber Insurance for SLED Entities Cyber insurance offers financial protection against losses incurred due to cyber-related incidents. The implementation of XDR solutions like Cisco XDR can significantly impact cyber insurance premiums and coverage for SLED entities. It demonstrates a proactive approach to security, which insurers often reward. Conclusion Operating a SOC in a SLED environment requires adherence to best practices. These practices include robust incident response strategies, and comprehensive threat detection. For SLED entities, the \u201cSOC in a BOX\u201d concept is not just an idea; it\u2019s real with Cisco XDR.\u00a0 Cisco XDR is a practical approach to safeguarding the data and operations of State, Local, and Education entities, including law enforcement. It was designed to help SOC analysts detect and respond to threats more quickly and effectively by providing a unified view of security data across multiple security tools and data sources. SLED SOC teams can have their analyst at any skill level perform advanced tasks elevating productivity and improving decision making times. Cisco XDR is at the forefront of this \u201cSOC in a BOX\u201d transformation, providing SLED SOC teams with the tools they need to stay ahead of the ever-evolving cybersecurity threats. With an open approach, effective threat detection, and important considerations for cyber insurance, Cisco XDR is that tool in the toolbox SLED entities need in their quest for a secure and resilient future. Related Links \/ Resources Cisco XDR: Security Operations Simplified eBook An XDR Primer: The Promise of Simplifying Security Operations Cisco XDR: At a Glance (pdf) XDR: More than just another SecOps Tool (pdf) We\u2019d love to hear what you think. Ask a Question, Comment Below, and Stay Connected with Cisco Security on social! Cisco Security Social Channels InstagramFacebookTwitterLinkedIn Share Share: \u00a0\u00a0Learn how Cisco XDR simplifies and enhances the operations of SLED-focused SOCs, helping them achieve their security resilience goals.\u00a0\u00a0Read More\u00a0Cisco Blogs\u00a0\" \/>\n<meta property=\"og:url\" content=\"https:\/\/jacksonholdingcompany.com\/cisco-xdr-sleds-soc-in-a-box-norman-st-laurent-on-december-13-2023-at-100-pm\/\" \/>\n<meta property=\"og:site_name\" content=\"JHC\" \/>\n<meta property=\"article:published_time\" content=\"2023-12-13T16:02:55+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/jacksonholdingcompany.com\/wp-content\/uploads\/2023\/12\/16494117-vuUm3r.gif\" \/>\n\t<meta property=\"og:image:width\" content=\"1\" \/>\n\t<meta property=\"og:image:height\" content=\"1\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/gif\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"7 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/jacksonholdingcompany.com\/cisco-xdr-sleds-soc-in-a-box-norman-st-laurent-on-december-13-2023-at-100-pm\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/jacksonholdingcompany.com\/cisco-xdr-sleds-soc-in-a-box-norman-st-laurent-on-december-13-2023-at-100-pm\/\"},\"author\":{\"name\":\"\",\"@id\":\"\"},\"headline\":\"Cisco XDR: SLEDs \u201cSOC in a Box\u201d Norman St. Laurent on December 13, 2023 at 1:00 pm\",\"datePublished\":\"2023-12-13T16:02:55+00:00\",\"dateModified\":\"2023-12-13T16:02:55+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/jacksonholdingcompany.com\/cisco-xdr-sleds-soc-in-a-box-norman-st-laurent-on-december-13-2023-at-100-pm\/\"},\"wordCount\":1423,\"publisher\":{\"@id\":\"https:\/\/jacksonholdingcompany.com\/#organization\"},\"image\":{\"@id\":\"https:\/\/jacksonholdingcompany.com\/cisco-xdr-sleds-soc-in-a-box-norman-st-laurent-on-december-13-2023-at-100-pm\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/jacksonholdingcompany.com\/wp-content\/uploads\/2023\/12\/16494117-vuUm3r.gif\",\"articleSection\":[\"Cisco: Learning\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/jacksonholdingcompany.com\/cisco-xdr-sleds-soc-in-a-box-norman-st-laurent-on-december-13-2023-at-100-pm\/\",\"url\":\"https:\/\/jacksonholdingcompany.com\/cisco-xdr-sleds-soc-in-a-box-norman-st-laurent-on-december-13-2023-at-100-pm\/\",\"name\":\"Cisco XDR: SLEDs \u201cSOC in a Box\u201d Norman St. Laurent on December 13, 2023 at 1:00 pm - JHC\",\"isPartOf\":{\"@id\":\"https:\/\/jacksonholdingcompany.com\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/jacksonholdingcompany.com\/cisco-xdr-sleds-soc-in-a-box-norman-st-laurent-on-december-13-2023-at-100-pm\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/jacksonholdingcompany.com\/cisco-xdr-sleds-soc-in-a-box-norman-st-laurent-on-december-13-2023-at-100-pm\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/jacksonholdingcompany.com\/wp-content\/uploads\/2023\/12\/16494117-vuUm3r.gif\",\"datePublished\":\"2023-12-13T16:02:55+00:00\",\"dateModified\":\"2023-12-13T16:02:55+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/jacksonholdingcompany.com\/cisco-xdr-sleds-soc-in-a-box-norman-st-laurent-on-december-13-2023-at-100-pm\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/jacksonholdingcompany.com\/cisco-xdr-sleds-soc-in-a-box-norman-st-laurent-on-december-13-2023-at-100-pm\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/jacksonholdingcompany.com\/cisco-xdr-sleds-soc-in-a-box-norman-st-laurent-on-december-13-2023-at-100-pm\/#primaryimage\",\"url\":\"https:\/\/jacksonholdingcompany.com\/wp-content\/uploads\/2023\/12\/16494117-vuUm3r.gif\",\"contentUrl\":\"https:\/\/jacksonholdingcompany.com\/wp-content\/uploads\/2023\/12\/16494117-vuUm3r.gif\",\"width\":1,\"height\":1},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/jacksonholdingcompany.com\/cisco-xdr-sleds-soc-in-a-box-norman-st-laurent-on-december-13-2023-at-100-pm\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/jacksonholdingcompany.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Cisco XDR: SLEDs \u201cSOC in a Box\u201d Norman St. Laurent on December 13, 2023 at 1:00 pm\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/jacksonholdingcompany.com\/#website\",\"url\":\"https:\/\/jacksonholdingcompany.com\/\",\"name\":\"JHC\",\"description\":\"Your Business Is Our Business\",\"publisher\":{\"@id\":\"https:\/\/jacksonholdingcompany.com\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/jacksonholdingcompany.com\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/jacksonholdingcompany.com\/#organization\",\"name\":\"JHC\",\"url\":\"https:\/\/jacksonholdingcompany.com\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/jacksonholdingcompany.com\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/jacksonholdingcompany.com\/wp-content\/uploads\/2023\/07\/cropped-cropped-jHC-white-500-\u00d7-200-px-1-1.png\",\"contentUrl\":\"https:\/\/jacksonholdingcompany.com\/wp-content\/uploads\/2023\/07\/cropped-cropped-jHC-white-500-\u00d7-200-px-1-1.png\",\"width\":452,\"height\":149,\"caption\":\"JHC\"},\"image\":{\"@id\":\"https:\/\/jacksonholdingcompany.com\/#\/schema\/logo\/image\/\"}}]}<\/script>\n","yoast_head_json":{"title":"Cisco XDR: SLEDs \u201cSOC in a Box\u201d Norman St. Laurent on December 13, 2023 at 1:00 pm - JHC","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/jacksonholdingcompany.com\/cisco-xdr-sleds-soc-in-a-box-norman-st-laurent-on-december-13-2023-at-100-pm\/","og_locale":"en_US","og_type":"article","og_title":"Cisco XDR: SLEDs \u201cSOC in a Box\u201d Norman St. Laurent on December 13, 2023 at 1:00 pm","og_description":"For State, Local, and Education (both Higher Ed and K-12) (SLED) entities the Security Operations Center (SOC) is a required tool in the toolbox and a necessity for Cyber Insurance.\u00a0 Threats to data \u2026 Read more on Cisco Blogs \u200b For State, Local, and Education (both Higher Ed and K-12) (SLED) entities the Security Operations Center (SOC) is a required tool in the toolbox and a necessity for Cyber Insurance.\u00a0 Threats to data and information are ever evolving, and better safeguarding the security of SLED entities is a must. The cornerstone of a robust defense is the SOC. In this blog, we\u2019ll explore how Cisco XDR simplifies and enhances the operations of SLED-focused SOCs, helping them achieve security and resilience goals in an open and collaborative manner. Watch the following video to learn more about Cisco XDR: [embedded content] Cisco XDR: A Game-Changer for SLED Entities \u2013 A \u201cSOC in a Box\u201d State and local governments, along with educational institutions, have increasingly become targets for cyber threats. These threats have the power to cause significant damage, and now use tactics and techniques that were once reserved for high-value targets.\u00a0 Cyberattacks like malware, ransomware, and phishing are increasing, and with 100,000 different local, state, law enforcement, tribal, townships, cities, municipalities, and county governments cyber criminals have a very big landscape to choose from in SLED. Current security tools struggle to detect and investigate sophisticated threat actors like BlackTech, Volt Typhoon or Wizard Spyder. Funding constraints also pose problems in SLED environments. This creates a situation where some of these entities are viewed as ripe for the picking by threat actors. Built for SecOps pros by SecOps pros Cisco XDR is a unified threat detection, investigation, mitigation, and hunting solution that integrates the entire Cisco security portfolio and select third-party tools \u2013 endpoint, email, network, and cloud, along with superior threat intelligence. Your teams can now go from endless investigation to remediating the highest priority incidents with greater speed, efficiency, and confidence. According to Security Intelligence, the number of cyber-attacks targeting government agencies increased by 95% in 2022 compared to the previous year.\u00a0 The article also notes that in 2022, 89 education sector organizations fell victim to ransomware attacks impacting 45 school districts and 44 colleges and universities. Tight budgets within SLED limit their ability to build adequate defense in depth.\u00a0 Cisco XDR can quickly help provide a comprehensive solution that protects SLED environments against evolving cybersecurity challenges. By integrating detection and response capabilities, Cisco XDR simplifies SOC operations, enabling proactive threat mitigation. Cisco XDR is an affordable unified security solution that integrates and correlates data from multiple security products across an organization\u2019s networks, cloud, endpoints, email, and applications.\u00a0 It is a \u201cSOC in a Box\u201d that helps security operation teams to detect, prioritize, and respond to threats efficiently. The Growing Need for Extended Detection and Response Agencies and departments now use more devices, applications, and tools than ever before, and this complexity has created a persistent and growing security challenge. \u00a0\u00a0The typical SLED detection and response model is built upon self-contained point security solutions, which are pieced together and require lots of staffing resources to maintain.\u00a0 To this point, these traditional security measures are no longer sufficient to combat advanced threats. SLED entities need an XDR approach that goes beyond mere detection. Security leadership and their teams are demanding better efficacy, experience and higher ROI. Cisco XDR steps in as the all-inclusive solution for identifying, investigating, and remediating threats. Cisco XDR is comprehensive, providing prioritized and contextualized telemetry, and actionable insight on what steps can be immediately taken. Cisco XDR improves visibility and creates true context across an environment, while enabling unified detection from a single investigative viewpoint that supports fast accurate threat response. Cisco XDR also elevates productivity even further through automation and orchestration, and includes other advanced user-friendly SOC necessities such as: Playbook driven automation Guided incident response Threat hunting Alert prioritization, and Breach pattern analysis. This \u201cSOC in a Box\u201d immediately gives SLED SOC environments improved advanced threat detection, response efficiency, and investigation powers. Automation and orchestration are essential concepts in the field of computer and network security, particularly from a Security Operations Center (SOC) point of view. These concepts help SOC teams streamline their processes, improve response times, and enhance overall security posture. Here\u2019s a breakdown of what automation and orchestration mean in the context of a SOC in a SLED environment: Automation Automation in a SOC refers to the use of technology and scripts to perform repetitive and predefined tasks without manual intervention. These tasks can include activities such as log analysis, threat detection, incident response, and vulnerability scanning. The goal of automation is to reduce the workload on security analysts and speed up the detection and response to security incidents. Automation can handle routine, well-defined tasks, allowing human analysts to focus on more complex and strategic aspects of security. Examples of automated tasks in a SOC include automatically blocking IP addresses associated with malicious activity, generating alerts, and enriching security alerts with additional context (from additional security tools). Orchestration Orchestration goes a step further than automation by integrating various security tools, processes, and workflows into a coordinated and streamlined system. It involves creating workflows and playbooks that define how different security tools and processes should work together to respond to specific security incidents.\u00a0 Orchestration aims to ensure that different security solutions communicate and collaborate effectively. It includes connecting various security technologies.\u00a0 SOC orchestration helps improve response coordination, reduces the likelihood of errors, and enhances overall security incident management by providing a standardized, repeatable process for incident response. Cisco\u2019s Open Approach to XDR What sets Cisco XDR apart is its open and collaborative approach. Rather than relying on closed, proprietary systems, Cisco embraces interoperability. This means that SLED SOC environments can integrate Cisco XDR into their existing ecosystems, ensuring a seamless and efficient security framework that works in harmony with other tools and technologies.\u00a0 SLED entities cannot afford clunky vender integrations that make It harder and more time consuming for SOC analysts to investigate. Cisco XDR is an open extensible solution, with turnkey integrations with a variety of third-party vendors allowing security operation teams to quickly adopt a unified and simple approach to their security across their security stack. Building an Effective XDR Solution An effective XDR solution requires multiple sources of telemetry and up-to-the-minute threat intelligence. Cisco Talos, the world-renowned threat intelligence research team provides this crucial data. By leveraging these sources, Cisco XDR helps SLED SOC teams detect and prioritize threats more effectively. Now, streamlined investigations and rapid threat remediation have become standard operating procedures. XDR and Cyber Insurance for SLED Entities Cyber insurance offers financial protection against losses incurred due to cyber-related incidents. The implementation of XDR solutions like Cisco XDR can significantly impact cyber insurance premiums and coverage for SLED entities. It demonstrates a proactive approach to security, which insurers often reward. Conclusion Operating a SOC in a SLED environment requires adherence to best practices. These practices include robust incident response strategies, and comprehensive threat detection. For SLED entities, the \u201cSOC in a BOX\u201d concept is not just an idea; it\u2019s real with Cisco XDR.\u00a0 Cisco XDR is a practical approach to safeguarding the data and operations of State, Local, and Education entities, including law enforcement. It was designed to help SOC analysts detect and respond to threats more quickly and effectively by providing a unified view of security data across multiple security tools and data sources. SLED SOC teams can have their analyst at any skill level perform advanced tasks elevating productivity and improving decision making times. Cisco XDR is at the forefront of this \u201cSOC in a BOX\u201d transformation, providing SLED SOC teams with the tools they need to stay ahead of the ever-evolving cybersecurity threats. With an open approach, effective threat detection, and important considerations for cyber insurance, Cisco XDR is that tool in the toolbox SLED entities need in their quest for a secure and resilient future. Related Links \/ Resources Cisco XDR: Security Operations Simplified eBook An XDR Primer: The Promise of Simplifying Security Operations Cisco XDR: At a Glance (pdf) XDR: More than just another SecOps Tool (pdf) We\u2019d love to hear what you think. Ask a Question, Comment Below, and Stay Connected with Cisco Security on social! Cisco Security Social Channels InstagramFacebookTwitterLinkedIn Share Share: \u00a0\u00a0Learn how Cisco XDR simplifies and enhances the operations of SLED-focused SOCs, helping them achieve their security resilience goals.\u00a0\u00a0Read More\u00a0Cisco Blogs\u00a0","og_url":"https:\/\/jacksonholdingcompany.com\/cisco-xdr-sleds-soc-in-a-box-norman-st-laurent-on-december-13-2023-at-100-pm\/","og_site_name":"JHC","article_published_time":"2023-12-13T16:02:55+00:00","og_image":[{"width":1,"height":1,"url":"https:\/\/jacksonholdingcompany.com\/wp-content\/uploads\/2023\/12\/16494117-vuUm3r.gif","type":"image\/gif"}],"twitter_card":"summary_large_image","twitter_misc":{"Est. reading time":"7 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/jacksonholdingcompany.com\/cisco-xdr-sleds-soc-in-a-box-norman-st-laurent-on-december-13-2023-at-100-pm\/#article","isPartOf":{"@id":"https:\/\/jacksonholdingcompany.com\/cisco-xdr-sleds-soc-in-a-box-norman-st-laurent-on-december-13-2023-at-100-pm\/"},"author":{"name":"","@id":""},"headline":"Cisco XDR: SLEDs \u201cSOC in a Box\u201d Norman St. Laurent on December 13, 2023 at 1:00 pm","datePublished":"2023-12-13T16:02:55+00:00","dateModified":"2023-12-13T16:02:55+00:00","mainEntityOfPage":{"@id":"https:\/\/jacksonholdingcompany.com\/cisco-xdr-sleds-soc-in-a-box-norman-st-laurent-on-december-13-2023-at-100-pm\/"},"wordCount":1423,"publisher":{"@id":"https:\/\/jacksonholdingcompany.com\/#organization"},"image":{"@id":"https:\/\/jacksonholdingcompany.com\/cisco-xdr-sleds-soc-in-a-box-norman-st-laurent-on-december-13-2023-at-100-pm\/#primaryimage"},"thumbnailUrl":"https:\/\/jacksonholdingcompany.com\/wp-content\/uploads\/2023\/12\/16494117-vuUm3r.gif","articleSection":["Cisco: Learning"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/jacksonholdingcompany.com\/cisco-xdr-sleds-soc-in-a-box-norman-st-laurent-on-december-13-2023-at-100-pm\/","url":"https:\/\/jacksonholdingcompany.com\/cisco-xdr-sleds-soc-in-a-box-norman-st-laurent-on-december-13-2023-at-100-pm\/","name":"Cisco XDR: SLEDs \u201cSOC in a Box\u201d Norman St. Laurent on December 13, 2023 at 1:00 pm - JHC","isPartOf":{"@id":"https:\/\/jacksonholdingcompany.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/jacksonholdingcompany.com\/cisco-xdr-sleds-soc-in-a-box-norman-st-laurent-on-december-13-2023-at-100-pm\/#primaryimage"},"image":{"@id":"https:\/\/jacksonholdingcompany.com\/cisco-xdr-sleds-soc-in-a-box-norman-st-laurent-on-december-13-2023-at-100-pm\/#primaryimage"},"thumbnailUrl":"https:\/\/jacksonholdingcompany.com\/wp-content\/uploads\/2023\/12\/16494117-vuUm3r.gif","datePublished":"2023-12-13T16:02:55+00:00","dateModified":"2023-12-13T16:02:55+00:00","breadcrumb":{"@id":"https:\/\/jacksonholdingcompany.com\/cisco-xdr-sleds-soc-in-a-box-norman-st-laurent-on-december-13-2023-at-100-pm\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/jacksonholdingcompany.com\/cisco-xdr-sleds-soc-in-a-box-norman-st-laurent-on-december-13-2023-at-100-pm\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/jacksonholdingcompany.com\/cisco-xdr-sleds-soc-in-a-box-norman-st-laurent-on-december-13-2023-at-100-pm\/#primaryimage","url":"https:\/\/jacksonholdingcompany.com\/wp-content\/uploads\/2023\/12\/16494117-vuUm3r.gif","contentUrl":"https:\/\/jacksonholdingcompany.com\/wp-content\/uploads\/2023\/12\/16494117-vuUm3r.gif","width":1,"height":1},{"@type":"BreadcrumbList","@id":"https:\/\/jacksonholdingcompany.com\/cisco-xdr-sleds-soc-in-a-box-norman-st-laurent-on-december-13-2023-at-100-pm\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/jacksonholdingcompany.com\/"},{"@type":"ListItem","position":2,"name":"Cisco XDR: SLEDs \u201cSOC in a Box\u201d Norman St. Laurent on December 13, 2023 at 1:00 pm"}]},{"@type":"WebSite","@id":"https:\/\/jacksonholdingcompany.com\/#website","url":"https:\/\/jacksonholdingcompany.com\/","name":"JHC","description":"Your Business Is Our Business","publisher":{"@id":"https:\/\/jacksonholdingcompany.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/jacksonholdingcompany.com\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/jacksonholdingcompany.com\/#organization","name":"JHC","url":"https:\/\/jacksonholdingcompany.com\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/jacksonholdingcompany.com\/#\/schema\/logo\/image\/","url":"https:\/\/jacksonholdingcompany.com\/wp-content\/uploads\/2023\/07\/cropped-cropped-jHC-white-500-\u00d7-200-px-1-1.png","contentUrl":"https:\/\/jacksonholdingcompany.com\/wp-content\/uploads\/2023\/07\/cropped-cropped-jHC-white-500-\u00d7-200-px-1-1.png","width":452,"height":149,"caption":"JHC"},"image":{"@id":"https:\/\/jacksonholdingcompany.com\/#\/schema\/logo\/image\/"}}]}},"_links":{"self":[{"href":"https:\/\/jacksonholdingcompany.com\/wp-json\/wp\/v2\/posts\/1963","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/jacksonholdingcompany.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/jacksonholdingcompany.com\/wp-json\/wp\/v2\/types\/post"}],"replies":[{"embeddable":true,"href":"https:\/\/jacksonholdingcompany.com\/wp-json\/wp\/v2\/comments?post=1963"}],"version-history":[{"count":0,"href":"https:\/\/jacksonholdingcompany.com\/wp-json\/wp\/v2\/posts\/1963\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/jacksonholdingcompany.com\/wp-json\/wp\/v2\/media\/1964"}],"wp:attachment":[{"href":"https:\/\/jacksonholdingcompany.com\/wp-json\/wp\/v2\/media?parent=1963"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/jacksonholdingcompany.com\/wp-json\/wp\/v2\/categories?post=1963"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/jacksonholdingcompany.com\/wp-json\/wp\/v2\/tags?post=1963"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}