Summary

---

Intrusion detection is impossible without preparation, which includes the following measures:

• The education and training of all personnel within your organization in various fields of information security

• Defining an appropriate security policy that takes into account all aspects of your organization's business activity

• Selecting mechanisms for logging system and network activity

• Creating an inventory of software and hardware used in the corporate network and documenting the network map

• Purchasing the most advanced tools enabling the detection of security policy violations, at both the network and system levels

---