Security News > 2022 > August > Incident response in the cloud can be simple if you are prepared

Incident response in the cloud is far simpler than on-premises incident response.

There is a catch, though: All the tools you need to do IR reside in the platform of your favorite cloud providers and SaaS products, so you need to do some initial setup to be prepared for an incident.

Default log dashboards in the cloud are not built for incident response investigations.

Taking advantage of the cloud's built-in incident response begins with centralizing all your logging.

Most cloud log portals have throttling for the on-demand downloads to protect the overall availability of the log services for all clients.

At a bare minimum, cloud resources should be tagged with the cost center, person responsible, relevant service and role of that cloud resource to the service.

News URL

https://www.helpnetsecurity.com/2022/08/17/incident-response-cloud/