Incorrect configurations may prevent detection systems from working properly. If the alarm settings are incorrect, for example, it can lead to more false alarms. This may prevent the employees responsible from differentiating between a false alarm and a security-relevant event. Furthermore, they might not notice messages quickly enough because too many alarms are being generated. Attacks might remain unnoticed as a result. The time required to analyse all the messages will also increase significantly.
- BSI -
Copyright by Bundesamt für Sicherheit in der Informationstechnik (https://www.bsi.bund.de/)