When an organization decides to modernize a Security Operations Center (SOC) or implement a more formal security program, they must make a number of important decisions. What workbench will they use? Will the IT operate 24 hours a day? How will they resource the SOC? What team structure will they use? How long will it take for the SOC to become operational? Do they outsource any part of it? What do they do in the meantime?
Given the short tenures of many CISOs, it is quite likely that they might devote their entire time modernizing a SOC that they never get to see fully utilized. To that end, today’s CISO needs to seriously consider what a SOC modernization project looks like: a full-blown project or making smaller incremental changes that can drive fast improvements. Certainly, in some cases, a new CISO may find the SOC in such disrepair that the only option is to start from scratch, but that situation is an outlier that will be discussed in another paper.
Download our guide where we will outline a pragmatic approach that a CISO can follow to take their security operations from inefficient to efficient as quickly as possible.
