Security Operations Centre – part 4

Security Operations Centre – part 4

Eugene Wypior Security Operations Centre – part 4 The human factor of SOCs According to the definition of Security Operations Centre (SOC) we used in part 1 of these series, ‘SOC is a combination of people, processes and technologies (…)’. How does a SOC’s team...
Security Operations Centre – part 3

Security Operations Centre – part 3

Eugene Wypior Security Operations Centre – part 3 The SOC’s main purpose is the identification and reaction to threats. A SOC needs to be able to see what is going on the in the information system it is intending to protect. What else you envision your SOC to do...
Security Operations Centre – part 2

Security Operations Centre – part 2

Eugene Wypior Security Operations Centre – part 2 You can only truly protect what you know you have 1. Asset inventory You must understand what your assets are in order to understand what you are going to protect. Make sure you have identified all the devices...