Register now or log in to join your professional community.
SOC - SECURITY OPERATIONS CENTER
ITS A COMMAND AND CONTROL CENTER EQUIPPED WITH SKILLED IT SECURITY ENGINEERS WITH VARIOUS SECURITY PRODUCTS AND SERVICES SKILLSET MONITORING THE SECURITY TRAFFIC OF AN ORGANIZATION FOR ANY MALICIOUS TRAFFIC, HACKER THREATS, IT POLICY VIOLATION ETC.
SOC SERVICE PROVIDER GENERALLY KNOWS AS MANAGED SECURITY SERVICE PROVIDER (MSSP) SIGN A SRVICE LEVEL AGREEMENT (SLA) WITH CUSTOMERS TO MANAGER THEIR IT ASSETS (CAN BE EXTENDED TO OTHER ASSETS EG. POS MACHINES) WITH CYBER SECURITY RISK FREE ENVIRONMENT.
THE SLA DEFINES VARIOUS PRIORITY LEVELS (LIKE P1, P2 ETC) BASED ON THE CRITICALITY AND REQUIREMENTS AS SPECIFIED BY CUSTOMER ENVIRONMENT, INDUSTRY STANDARDS (LIKE PCI DSS, GDPR) ETC..
ON A TYPICAL SOC, SECURITY ENGINEERS WITH SKILLSET (JOB DESIGNATIONS: L1, L2, L3, SOC ANALYST, SOC MANAGER ETC) WILL MONITOR THE INCOMING AND OUTGOING TRAFFIC AND EXECUTE THE SECURITY POLICY DEFINED AS PER EACH CUSTOMER SLA/INDUSTRY STANDARDS. TYPICAL ASSETS THEY MONITOR AND MANAGE INCLUDES FIREWALL DEVICES, NETWORK DEVICES, APPLICATIONS, SERVERS, DATABASES ETC..
SOC ADVANTAGE - WITH THE ABOVE MENTIONED DETAILS, SIGNING UP FOR SOC SERVICES THROUGH A MSSP WILL ADVANTAGE ORGANIZATIONS TO DEPEND ON THE PEOPLE WITH THE RIGHT MIX OF SUBJECT KNOWLEDGE AND EXPERIENCE, COST EFFECTIVE APPROACH (AS THEY DON'T NEED TO INVEST IN UP TO DATE TECHNOLOGIES AND PEOPLE),
HOPE THIS HELPS!!