Cybersecurity analysts need to be able to see beyond what monitors and dashboards are telling them. They need to learn to think like the very attackers they are combating. Give them the right tools, give them good training and detonate a completely separate Internet connection for business. Don’t skimp on the tools you need to give your analysts the ability to do the hard work needed to be a good cybersecurity analyst. For basic investigations, they should stick to the playbook that they follow, but don’t ditch the work routine, but do it when they need it.”]

