Cyber security monitoring is the process of detecting cyber security threats and data breaches. IT infrastructure monitoring is a crucial part of risk management that enables organizations to detect cyber attacks immediately when they occur and to respond to them before they result in damage and disruption to the network.
This type of security monitoring is typically conducted at the network and endpoint levels. At the network level, security monitoring software identifies and analyses potential threats from a range of sources. Endpoint security technologies provide security visibility at the host level and control user authentication and access. These tools enable security teams to detect threats when they first occur and enable them to be dealt with before damage is caused by malicious actors. Popular endpoint security monitoring tools include those based on Endpoint Detection and Response (EDR) and Endpoint Protection Platforms (EPP).