Designing and Building Security Operations Center

Chapter 2

Identify your customers

Abstract

When you are looking to build a security operations center you need to know who the customers are. The customers may be internal departments or external customers.

Keywords

customer

performance

HR

legal

audit

internal

external

use case

Chapter contents

 Internal versus external customers 27

 Human resources 27

 Legal 28

 Audit 29

 Engineering/R&D 30

 IT 30

 External customers 31

 Customer objectives 32

 Service level agreements 32

 Build and document your use cases 36

 Use case: unauthorized modification of user accounts 38

 Stakeholders: compliance and audit departments 39

 Use case: disabled user account reactivated 39

 Stakeholders: HR and IT 39

 Use case: any IDS event that scores over ...