What happens when Monitoring, Observability and Cybersecurity are no longer treated as separate disciplines? 

How can organizations gain a better understanding of complex IT environments? How can they identify relevant threats at an early stage? And how can they turn growing volumes of data and alerts into informed decisions? 

These were some of the key questions at the NetEye Conference DACH, held in Nuremberg on 8 October. Marking its tenth anniversary, the event welcomed more than 70 participants to KORN’S for the first time, bringing together professionals to discuss current challenges in IT Operations and Cybersecurity. 

One key takeaway emerged: individual tools and data provide valuable information, but their real value lies in connecting the dots, assessing risks accurately and translating insights into specific action. 

4 key takeaways from the NetEye Conference DACH 

• Connect the dots: Network data and Observability provide greater visibility into complex IT environments. 

• Assess threats earlier: Effective Cyber Defense combines technical analysis, Threat Intelligence and human expertise. 

• Make processes work: IT Service Management translates requirements into clear, structured workflows. 

• Prioritize what matters: The goal is to distinguish meaningful signals from unnecessary alerts. 

Improving visibility and understanding dependencies 

Modern IT environments consist of numerous systems, applications and dependencies. Individual metrics are often not enough to identify the root cause of an outage or performance issue. 

The conference highlighted how network data and Observability can help organizations understand these interdependencies. Robert Cowart, CEO and Co-Founder of ElastiFlow, explored how network data can support the assessment of stability, performance and security. Georg Kostner, Head of Cyber Defence Center & BU IT System & Service Management at Würth IT, focused on Next Generation Observability, with particular attention to visibility across Kubernetes environments and modern data platforms. 

The common approach is to look beyond isolated data points and assess information in context. This makes it easier to understand dependencies and investigate issues more effectively. 

Identifying risks and taking a holistic approach to Cybersecurity 

Cybersecurity does not begin only when an attack is detected. Organisations need to understand their exposure, assess threats and prepare for different scenarios. 

The conference explored these challenges from several perspectives. Michael Sjøberg of Delta Crisis Management shared insights from real-world cyber extortion cases, explaining how attackers operate and how negotiations unfold. Tobias Goller of Würth IT examined the relationship between people, artificial intelligence and the Security Operations Center (SOC). 

Other sessions addressed the requirements of the Cyber Resilience Act (CRA), research into autonomous malware, and the use of Threat Intelligence and Exposure Monitoring. Günter Aigle showed how SATAYO combines threat intelligence, monitoring of exposed company assets and analytical expertise to support a more informed assessment of cyber risks. 

Together, these topics highlight what effective Cyber Defense requires: technical visibility, in-depth analysis and the ability to prioritize the right actions. 

Turning information into action 

Visibility and risk analysis are essential starting points. The next step is to translate insights into effective processes and concrete measures. 

Marco Stecher, IT Manager at hollu Systemhygiene, presented a practical example of using GLPI for IT Service Management. Mirko Morandini, Solution Architect GLPI at Würth IT, also introduced GLPI 12, which made its German debut at the conference. New features include a Knowledge Base and enhanced search and viewing options. 

Alert management is another key part of the picture. In his session “Nobody Ordered 4,000 Alerts”, Blerim Sheqa, COO of Icinga, addressed a familiar challenge for many IT teams: dealing with high volumes of alerts while identifying the ones that genuinely matter. 

More information does not automatically lead to better decisions. What matters is understanding which signals are relevant in each context and determining the right response. 

Ten years of exchange on IT Operations and Cybersecurity 

The tenth NetEye Conference DACH brought together professionals, technology providers and users to discuss topics ranging from Observability and IT Service Management to Cyber Defense, Threat Intelligence and emerging regulatory requirements. 

The common thread was how organizations can gain a better understanding of their IT environments, assess risks with confidence and respond to relevant events. Monitoring, Observability and Cybersecurity are not isolated disciplines. When considered together, they provide a stronger foundation for managing and securing complex IT environments. 

Thanks to Gravitate for organizing the event, to all speakers for sharing their expertise, and to the participants and partners for the exchange in Nuremberg.