Roles of a Service Desk Manager

A service desk  manager has 3 broad roles to play:

• General Management
• Service Operations
• Special Projects

General Management
In most IT organizations, the service table often represents the largest single function comprising of huge groups with multiple shifts and locations. Managing the carrier table requires trendy people control skills, which involves the following activities:

• Hiring new technicians.
• Training technicians.
• Managing the shift of the technicians.
• Managing any third-birthday celebration vendors.
• Defining pleasant techniques.

Cost management and budgeting for the department.
A provider desk manager has to put on many hats. He/she is concerned within the operations to ensure tickets are resolved in a timely manner; he/she might also be worried in other commercial enterprise-impacting initiatives.

Service Operations

Apart from the general control role, a provider desk manager is chargeable for a essential characteristic which is timely carrier delivery.

A provider table approaches a big wide variety of requests, and all of them ought to be resolved inside a defined SLA. The onus is on the provider table manager to ensure the SLA requirements are met, for which the supervisor performs some not unusual carrier operations activities:

Training and Mentoring.

• Make sure tickets are assigned based totally on workload.
• SLA tracking and compliance check.
• Communication and collaboration.
• Monitor operational performance.

Reporting.

• Continuous improvement.
• Manage shift handoffs.

In most organizations, service table operations are based on a preferred framework for example ITIL. In maximum cases, carrier table managers are implementing a framework, and they have a certification and revel in to lower back their work.

Special Projects
Since the provider table is a valuable function in an organization, the carrier desk manager attains critical experience which he/she sometimes uses in other enterprise activities. He/she will either take part at once or oversee a small team worried with the activities.

The purpose of regarding the provider help desk jobs  in unique tasks is to minimize capability disruptions to the commercial enterprise because of any form of changes.

Knowledge and behavior based IDS

The knowledge IDS is based on a database that recognizes the signature of previously identified vulnerabilities. In this case, it is of utmost importance that the structure has a policy of continuous updating of this database, to guarantee the continuity of security of the environment. What is not known cannot be protected.

Behavior

This IDS, on the other hand, analyzes traffic behavior and follows a standard line of normal system activity. If there are deviations from this pattern - with the possibility of being an intrusion - some actions can be taken, such as the temporary blocking of traffic or alarms for network operation centers (NOC / SNOC). In this way, the abnormality can be better investigated, released or permanently blocked.

Active and passive IDS 

Active
An active IDS is defined as one that is programmed to automatically block attacks or suspicious activities that are known to you, without any need for human intervention. Although it is an extremely interesting model, adequate standardization in protected environments is important in order to minimize false positives - for example, by blocking connections that are legitimate, thus causing inconvenience to the company.

Passive
A passive IDS, finally, monitors the traffic that passes through it and thus identifies potential attacks or abnormalities. Based on this, it ends up generating alerts for administrators and security teams - without affecting anything in the communication.

Mor info:   managed intrusion detection

What is an intrusion detection / prevention system (IDS / IPS)?

One of the main activities within security (whether physical or logical) is monitoring. Monitoring is based on the initial definition of a series of thresholds of "normal" behavior of an object (an automatic control system, a data network, a computer, a computer program, etc.) and the subsequent comparison with its status current to detect possible anomalies at a specific time. This monitoring gives rise to a continuous feedback that will allow the activation of detective and / or corrective activities aimed at re-aligning this element within the established parameters:

As can be seen in the diagram, there are 3 functional blocks within the monitoring process:

A source of information or object to monitor, which processes, transmits or stores data
An analysis action where behavioral data from the information source will be collected and compared with the expected parameters

A response to abnormal behavior, which can be passive (alert) or active (which can modify the environment to re-align the behavior)

Under this scenario, a system that is responsible for obtaining data from a source of information, analyzing them, comparing them against predefined values ​​of behavior to detect anomalous behaviors and generating response actions is called “Intrusion detection / prevention system”, meaning “intrusion »As an unauthorized action that may compromise the security of the monitored object. Examples of intrusion detection / prevention systems can be found in physical video surveillance systems, alarms, industrial automatic control systems, etc.

In the area of ​​information security, an intrusion detection system ("Intrusion Detection System" - IDS) or intrusion prevention system ("Intrusion Prevention System" - IPS) is an element that monitors the behavior of networks, host and / or applications in search of patterns of malicious behavior, sharing the same characteristics described above, which allow cataloging them according to their operation: