UBA - User Behavior Analytics and Network Security Controls

Question 1

User behavior analytics definition:

Answer 1

User behavior analytics refers to the process of monitoring user behavior in order to discover potential threats and attacks.

Question 2

General notes:

Answer 2

• monitoring users is entirely essential and (normally) justified
• companies need to conduct these processes in order to keep users from sharing sensitive information
  i. e: if someone has agreed to an NDA and they breach this NDA, there must be systems in place that allow this breach to be detected
• only ever w/in lawful means, and only ever gathering necessary information
• observe the patterns, establish what the ‘normal’ patterns and routines are, and any deviation from that pattern will raise certain flags (yellow, red, whatever you’re into) with the administrators who will then conduct investigations.
• if you don’t properly monitor the users in regard to their behaviors w/in the company, then you are opening up the company to potential insider threats

Question 3

Network security controls objective:

Answer 3

Ensure that nobody tampers with the data that goes over a particular network

So, to ensure the integrity of that data

Also, to preserve the confidentiality of that data
(this is why we have cryptography: in the case that the data is picked up somehow, whoever’s done the dirty will still probably be unable to read it)

Another role that NSC plays is to ensure readily available network services