Speaker: Marcello Centineo

A SIEM detects suspicious activity within seconds and can respond to threats automatically – but does that mean the incident is already resolved? In practice, this is often where the organizational challenge begins: the incident must be assessed and prioritized, responsibilities assigned, actions coordinated, and deadlines met.

This session shows why Detection & Response alone does not cover the entire incident response process of an organization – and how SIEM and ITSM can be connected to create an end-to-end workflow. Using ManageEngine Log360 and ServiceDesk Plus as an example, we follow a security incident from the initial alert through automated ticket creation and context enrichment to technical response and final resolution.

Respon ...