Go from zero to hero by using this simple SIEM use case management framework. The basics of SIEM use case management will be reviewed. We will go into depth on how to do it in a simple and practical way. We'll review an example use case database schema and review sample management reports that can assist you to mature your SIEM program.

Ryan Voloch has extensive experience in developing and maturing IT Security Operations for large enterprises, using technologies such as Security Information & Event Management (SIEM), Data Loss Prevention, File Integrity, and Intrusion Prevention Systems. He has successfully procured, implemented, managed and matured over 10 enterprise security solutions. Currently, Ryan supports Security Operations for Education Management Corporation's central services and 100+ colleges. Ryan has considerable experience with Incident Response, Risk Management and Vulnerability Management programs. He has performed more than 80 security assessments of internal and 3rd party systems to identify information security and continuity risks. One of Ryan's passions is process development and efficiency. Ryan started his career with a PCI level 1 merchant retailer and was heavily involved working with IT to design and develop solutions for attaining PCI compliance. Ryan is a graduate of Rochester Institute of Technology, a CISSP and is a GIAC Certified Incident Handler. Ryan lives in Pittsburgh, PA.

@VDog90

Back to Derbycon 2015 video list