Cybersecurity monitoring and event evaluation – Video course

Learn what the cybersecurity monitoring process contains under the framework of continual cybersecurity activities and ISO/SAE 21434 requirements. Moreover, you will learn the role of cybersecurity information and triage for cybersecurity monitoring. As a further step, you will also learn about event evaluation and get a practical example.

Continual cybersecurity activities are required to monitor threats or vulnerabilities and manage them. In this video course, we will focus on the first two activities: Cybersecurity Monitoring and Event Evaluation.

First, we will highlight the importance and role of cybersecurity monitoring in the context of continual cybersecurity activities. Then, we will define what cybersecurity monitoring is according to ISO/SAE 21434. In doing so, we will shortly introduce the role of triage in cybersecurity monitoring.

Once cybersecurity monitoring is defined, we will go deeper into explaining what it consists of and how it can be configured. Moreover, we will define what threat intelligence is and what some best practices are, including sharing practices between vehicle cybersecurity and enterprise cybersecurity. Here, we will also briefly introduce the ISO/SAE 21434 requirement for the collection of cybersecurity information.

Following up, we will define what cybersecurity information is and from which external and internal sources it can be gathered. Next, we will also provide some criteria to prioritize information about threats. Furthermore, we will also present what the benefits of a good cybersecurity monitoring infrastructure are.

After you understand how cybersecurity monitoring prescreens cybersecurity information, we will explain how cybersecurity triage evaluates relevance and determines a cybersecurity event. To illustrate this concept, we will go over a practical cybersecurity triage example.

Finally, we will explain how the next step in cybersecurity continual activities, cybersecurity event evaluation, looks like and define it as per ISO/SAE 21434.