Designing and Building Security Operations Center

Foreword

The Security Operations Center (the SOC for short), for those companies who have the means to operate their own cyber security organization, is a required central nervous system – a place where all of the sensors, security devices, and personnel report back; the location from which the networks are fought during times of crisis, and the location from which routine day-to-day operations are carried out, standing vigil.

In the past twenty years, I’ve been involved in the building of several intelligence and analysis or security operations programs. As technical controller and communications watch officer as a young enlisted man to building the early cyber intelligence and analysis center for the Navy’s Fleet Information Warfare Center, ...