Methodologies for Optimized Event and Incident Processing in Cybersecurity

Abstract

Cybersecurity is an essential function of all enterprises. Threat mitigation is necessary to prevent cyber risks from costing the enterprise much more money and resources. The enterprise should establish a robust and vigorous cybersecurity program. Every incident is an event but not every incident should demand an urgent response. Much of the value of incident processing and incident reporting lies in the free-text section of the incident report. In healthcare, incident processing is a key function of the IT department. By determining whether an attack’s detection is imminent, IT can utilize threat mitigation to reduce costs and resources associated with cybersecurity threats. Artificial intelligence, big data, and machine learning have been utilized in threat mitigation. In healthcare, this is an essential function of the IT department to reduce the likelihood of Ransomware attacks. This paper discusses event processing, incident processing, and the tools used to mitigate any attacks.

Keywords: Artificial intelligence (AI), Cybersecurity, Healthcare, Incident processing, Information, System, Threat mitigation.

View PDF