The original post: /r/cybersecurity by /u/yo_heythere1 on 2024-10-10 15:49:48.

Is it normal for security managers to panic on every, single alert that the vendor’s tools deemed as “critical” … I want to get insight if anyone else experiences the same where critical/sensitive findings require all hands on deck war room. This can range from misconfigured accounts to malware found on a single host. Personally, I’m the type to due some research before starting any calls to see if it’s a false positive like did the respective team legitimately ran the exe or was there an authorized pen test.

even i am still a novice to this field and am learning how to improve, but i cannot see myself working under management that panics without gathering some background information.