HansITAcademy

As a security analyst, you need to develop both technical and contextual understanding.  You will get lot of supplemental information to improve security.  For example, you see a user logged in with the correct username and password, but supplemental information like the time that user logged on and the location may help decide if it is a threat or not.  Network can be internal, external, and even be isolated and each of them has its own context and this is why scans can be done internally or externally.