Definition
Security Monitoring is the continuous observation of systems, networks and services to detect events that may indicate Threats or security Incidents.
Human Explanation
Monitoring continually checks whether something in the organisation's environment requires attention.
Why it Matters
Early detection of abnormal activity supports faster response and limits the impact of Incidents.
Conceptual Boundary
Security Monitoring does not perform corrective action. It provides information for further analysis and response.
Practical Perspective
Effective monitoring requires not only collecting data but also prioritising and analysing alerts appropriately.