A colleague recognizing a fact of life as a college CISO — that there never is enough money to do things right — told me about one way that he has solved much of the problem of needing monitoring and response without having the budget for serious intrusion detection/intrusion prevention systems (IDS/IPS) or security information management (SIM) gear. As I listened I was amazed at his ingenuity.