In the wake of the recent ransomware attack, the Health Service Executive has deployed additional expertise, resources and technology to provide enhanced monitoring of systems and networks. This is considered an interim measure as they procure a permanent Security Operations Centre to provide security and threat incidence monitoring and response including:
- monitoring and alerting on portals and software;
- monitoring and incident management of all devices on the network to ensure that all devices are compliant with rules/policies;
- threat incident response including triage, close and/or escalation.