Exam CRISC topic 1 question 1575 discussion

ChatGPT In the context of an organization that experienced multiple breaches detected months later, the most useful tool for timely monitoring and analysis going forward is: B. Security Information and Event Management (SIEM). SIEM systems provide real-time analysis of security alerts generated by applications and network hardware. They are designed to collect, store, and analyze security data from various sources within the organization, enabling the IT team to detect unusual patterns or activities that could indicate a security breach. The advantage of a SIEM system is its ability to aggregate data from multiple sources and use advanced analytics to identify potential threats quickly, often in real-time, which is crucial for early detection and response to security incidents.