Security Operations Center: Building, Operating and Maintaining your SOC

Chapter 10. Preparing to Operate

“The best preparation for good work tomorrow is to do good work today.”—Elbert Hubbard

This chapter provides an overview of the typical steps you need to complete to make your SOC fully operational. This means developing a clear transition or transformation plan for the SOC and ensuring that all the major pieces you need to be effective are in place. It also means managing executive expectations, usually to previously agreed-upon timelines with their own pressures. So, preparing a SOC to operate comes down to managing a shifting target, all with the help of executive sponsors. This chapter describes how to structure this transition stage and how to prepare your team to take on the heavy load associated with a ...