SoC - PATECCO GmbH

The Human Factor in the Storm – Crew Resource Management for the SOC

When experts lose track of the big picture Despite all the technology available, humans remain the most important and, at the same time, the most error-prone component in the security system. In aviation, it was recognized early on that accidents often happen not because of technical defects, but because of poor communication or wrong decisions made under stress. During a cyberattack, teams are under extreme psychological pressure. The release of cortisol and adrenaline often leads to “tunnel vision”. Analysts fixate on insignificant details while massive amounts of data are leaking elsewhere. Psychological stress reactions in cyber security The effects of stress are measurable and dangerous: Stress-Effect Impact on cybersecurity Fixation Analyst overlooks the spread in the data centre because he only checks one laptop. Cognitive overload Critical alerts are missed due to “alert fatigue.” Decision Paralysis Hesitation to disconnect the network for fear of disrupting operations. Normalcy Bias Suspicious actions are mistakenly interpreted as “normal” because thresholds are unknown or were not established in advance. The Solution: Crew Resource Management (CRM) To address this, aviation uses CRM training. In cybersecurity, we need to apply the same principles to incident response teams and SOCs. Through simulations (tabletop exercises) and red teaming, teams learn to communicate in a structured way under stress and remain confident in their actions. This is also a core ISO 27001 requirement for competence and awareness. Preventing an Economic Crash LandingThe goal of all these efforts is to avoid a “digital crash landing.” The consequences of weaknesses in information security today are ruthless: Proactive action means understanding your dependence on IT systems and having business continuity plans (ISO 27001 Control A.17) in place to ensure operations can continue during an attack. Conclusion: The CISO as Navigator Cybersecurity is a matter of professionalism, preparation, and organizational maturity. A modern CISO acts as a navigator, guiding the company through the storm on three pillars. When was the last time your crisis team trained under real stress conditions? Is your team ready for the “storm”? For more information, visit our IT-Security webpage: https://patecco.com/it-security/

The Human Factor in the Storm – Crew Resource Management for the SOC Weiterlesen »

Der Faktor Mensch im Sturm – Crew Resource Management für das SOC

Uncategorized / Ina Nikolova

Wenn Experten den Überblick verlieren Trotz aller Technik bleibt der Mensch die wichtigste und zugleich fehleranfälligste Komponente im Sicherheitssystem43. In der Luftfahrt wurde früh erkannt: Unfälle passieren oft nicht wegen technischer Defekte, sondern wegen mangelnder Kommunikation oder Fehlentscheidungen unter Stress. Während eines Cyberangriffs stehen Teams unter extremem psychologischen Druck. Die Ausschüttung von Cortisol und Adrenalin führt oft zum „Tunnelblick“. Analysten fixieren sich auf unbedeutende Details, während an anderer Stelle massiv Daten abfließen. Psychologische Stressreaktionen in der Cybersicherheit Die Auswirkungen von Stress sind messbar und gefährlich: Stress-Effekt Auswirkung in der Cybersicherheit Fixierung Analyst übersieht die Ausbreitung im RZ, weil er nur einen Laptop prüft. Kognitive Überlastung Kritische Warnungen werden durch „Alert Fatigue“ übersehen. Entscheidungslähmung Zögern bei der Netztrennung aus Angst vor Betriebsunterbrechung. Normalcy Bias Verdächtige Aktionen werden fälschlicherweise als „normal“ interpretiert, da Schwellwerte nicht bekannt oder im Vorfeld erhoben wurden. Die Lösung: Crew Resource Management (CRM) Um dem entgegenzuwirken, nutzt die Luftfahrt das CRM-Training. In der Cybersicherheit müssen wir dies auf Incident Response Teams und SOCs übertragen. Durch Simulationen (Tabletop Exercises) und Red Teaming lernen Teams, unter Stress strukturiert zu kommunizieren und handlungssicher zu bleiben. Dies ist zudem eine Kernanforderung der ISO 27001 an Kompetenz und Bewusstsein. Die Lösung: Crew Resource Management (CRM) Um dem entgegenzuwirken, nutzt die Luftfahrt das CRM-Training. In der Cybersicherheit müssen wir dies auf Incident Response Teams und SOCs übertragen. Durch Simulationen (Tabletop Exercises) und Red Teaming lernen Teams, unter Stress strukturiert zu kommunizieren und handlungssicher zu bleiben. Dies ist zudem eine Kernanforderung der ISO 27001 an Kompetenz und Bewusstsein. Die ökonomische Bruchlandung verhindern Das Ziel all dieser Anstrengungen ist die Vermeidung einer „digitalen Bruchlandung“. Die Konsequenzen von Mängeln in der Informationssicherheit sind heute gnadenlos. Proaktives Handeln bedeutet, die Abhängigkeit von IT-Systemen zu verstehen und Business Continuity Pläne (ISO 27001 Control A.17) zu haben, die den Weiterbetrieb während eines Angriffs ermöglichen. Fazit: Der CISO als Navigator Cybersicherheit ist eine Frage der Professionalität, Vorbereitung und kulturellen Reife. Ein moderner CISO fungiert als Navigator, der das Unternehmen auf drei Säulen durch den Sturm führt: Wann haben Sie Ihren Krisenstab das letzte Mal unter realen Stressbedingungen trainiert? Ist Ihr Team bereit für den „Sturm“? Weitere Informationen finden Sie auf unserer IT-Security-Seite: https://patecco.com/it-security/

Der Faktor Mensch im Sturm – Crew Resource Management für das SOC Weiterlesen »

PATECCO Achieves Delinea Gold Partner Status

Uncategorized / Ina Nikolova

We are proud to announce that PATECCO is now a Gold Partner of Delinea, a global leader in Privileged Access Management (PAM). This partnership marks a significant milestone in our strategic development and further confirms our deep expertise in the field of Identity & Access Management. Delinea offers cutting-edge PAM solutions that integrate seamlessly into complex IT environments – on-premises, hybrid, or fully cloud-based. As a long-standing IAM provider, we recognize the increasing demand for intelligent, scalable security solutions that protect privileged access and support compliance requirements. With the Gold Partner status, we not only demonstrate our technological competence but also reaffirm our commitment to helping organizations safeguard their digital identities. To ensure we continue delivering top-tier services, we will train at least three new colleagues this year in Delinea products, equipping them with the skills needed to handle any customer scenario. This ongoing investment in our team ensures that we remain agile, expert, and ready for the most complex challenges in the PAM landscape. We are also taking a big step towards strengthening our Managed Service offerings: we are currently building our own Security Operation Center (SoC) in Bochum, specifically designed to support and monitor all Delinea solutions we work with. For customers interested in a professional managed service, this means dedicated support, rapid response times, and tailored solutions – right here from Germany. Our growth doesn’t stop there – we are actively expanding our operations in Austria and Switzerland, bringing our proven expertise in PAM and IAM to a wider customer base in the DACH region. Local presence, combined with international experience, ensures our clients receive both personalized service and cutting-edge solutions. One of our key strengths is that we independently conduct all Proof of Concepts (PoCs). That means fast, efficient implementation and customized demonstrations tailored to each client’s unique infrastructure and goals. It’s a hands-on way to experience the power of Delinea solutions before going live. The Gold Partnership between PATECCO and Delinea marks a powerful alliance in the field of Identity and Access Management. With a clear focus on customer-centric solutions, continued investment in expert training, and the development of our own Security Operations Center, we are well-positioned to deliver secure, scalable, and future-ready PAM services. This is more than just a partnership – it’s a shared commitment to excellence, innovation, and trust.

PATECCO Achieves Delinea Gold Partner Status Weiterlesen »