EP133 The Shared Problem of Alerting: More SRE Lessons for Security

Topics covered:

• What is the shared problem for SRE and security when it comes to alerting?
• Why is there reluctance to reduce noise?
• How do SREs, security practitioners, and other stakeholders define “incident” and “risk”?
• How does involving an “adversary” change the way people think about an incident, even if the impact is identical?
• Which SRE alerting lessons do NOT apply at all for security?