Today, it is common to find SIEM deployed in the IT infrastructures of all kinds of organisations, to be able to monitor and analyse security alerts in applications, systems, network devices, etc. However, though time and resources are being invested in industrial environments, it is still unresolved.
The process of creating intelligence, and the correct application of this cycle to obtain "consumable" intelligence, targeted to our industry's specific threats, is essential in order to face the new defence needs.