The Modern Security Operations Center: The People, Process, and Technology for Operating SOC Services

Chapter 1

Introducing Security Operations and the SOC

The journey of a thousand miles begins with one step.

—Lao Tzu

Security is a simple concept: protect something from threats. Although this sounds easy, many organizations, from small government agencies to Fortune 500 businesses, do not know how to transform their current efforts into a formal security operations center (SOC). As a result, the security teams within these organizations have trouble obtaining the proper support and funding to improve their capabilities. Having static SOC capacities leads to failures in how the SOC functions because too much time is spent on reactive and manual efforts with no clear path for improvement of any SOC service. The combination of these challenges ...