The Modern Security Operations Center: The People, Process, and Technology for Operating SOC Services

Chapter 2

Developing a Security Operations Center

One great building does not make a great city.

—Thomas Heatherwick

Chapter 1 opened with an introduction to security concepts and covered how to rate the quality of existing capabilities and services against industry best practices. The starting point for your security operations center (SOC) journey may be anywhere between creating a new practice to enhancing a functioning operation. Regardless of the maturity of your operation, it is important to review everything from the high-level mission to the details for each process of each service your SOC is responsible for. This chapter begins with a review of high-level SOC development concepts and works down into the technical details found within ...