← Security+ glossary

Security monitoring

The continuous observation of systems, applications, users and network traffic in order to detect suspicious activity and security incidents. Monitoring alone, without reacting to what is observed, is not enough because it does not stop an attack, so it must be connected to alerting and incident response processes.

All Security+ guides →