Episode 5: INSM Anomaly Detection Strategies
To detect network anomalies for CIP-015 compliance, you must first establish a baseline of normal behavior. But without careful tuning, anomaly detection can introduce significant noise. This session will discuss baselining, detection options, and tuning best practices. We’ll also cover how to standardize anomaly response with playbooks.
