Training
Get a free hour of SANS training

Experience SANS training through course previews.

Learn More
Learning Paths
Can't find what you are looking for?

Let us help.

Contact us
Resources
Join the SANS Community

Become a member for instant access to our free resources.

Sign Up
For Organizations
Interested in developing a training plan to fit your organization’s needs?

We're here to help.

Contact Us
Talk with an expert

Full Packet Capture as a Strategic and Regulatory Imperative

  • Wed, Aug 13, 2025
  • 1:00PM - 2:00PM UTC
  • English
  • Matt Bromiley
  • Technical Presentation
Webcast Hero

From the U.S. government's 72-hour capture mandate to the EU’s NIS2 Directive, organizations are facing mounting pressure to implement full packet capture to meet emerging compliance obligations. What began as simple log retention requirements has evolved into a complex global web of regulations demanding forensic-grade network visibility.

This webcast will explore why traditional monitoring is no longer sufficient—and how organizations can strategically implement FPC to meet regulatory needs, accelerate threat detection, and avoid costly compliance gaps.

Whether you work in the public sector, financial services, healthcare, or critical infrastructure, understanding the technical and compliance imperatives behind FPC will help you future-proof your monitoring strategy.

What You’ll Learn

The Compliance-Driven Shift Toward FPC

Why governments and industry regulators are mandating full packet capture

Overview of U.S. mandates (OMB M-21-31, Zero Trust, NIST CSF 2.0)

Global trends: NIS2, DORA, GDPR, Saudi NCA ECC, and more

Technical Capabilities That Matter

Real-time and historical traffic visibility

Chain of custody, encryption, and tamper-proof preservation

Integration with SIEM, SOAR, and other security platforms

Strategic Implementation Considerations

Balancing visibility with privacy (GDPR, employee data rights, etc.)

Dealing with encrypted traffic: break-and-inspect strategies

Data retention, deletion, and lifecycle optimization

Building the Business Case

How one FPC platform can satisfy multiple regulatory frameworks

ROI through cost avoidance, reduced investigation time, and compliance readiness

Vendor selection criteria and phased rollout roadmap

Why Register:

Learn from industry experts 

Submit your questions to webcast speakers (When attending live)

Earn CPE credits 

Flexible access (Join live or watch the replay on your own time)

Bonus:

Exclusive complimentary white paper, available for download after the webcast. Check back here.

Meet the speaker

Matt Bromiley
Matt Bromiley

Matt Bromiley

Security R&D

Matt Bromiley is a Lead Solutions Engineer at LimaCharlie and SANS Certified Instructor. He serves as a GIAC Advisory Board member, a SME for the SANS Security Awareness, and a technical writer for the SANS Analyst Program.

Read more about Matt Bromiley
Full Packet Capture as a Strategic and Regulatory Imperative | SANS Institute