Security Operations Center

Security Operations Center is the complete guide to building, operating, and managing Security Operations Centers in any environment. Drawing on experience with hundreds of customers ranging from Fortune 500 enterprises to large military organisations, three leading experts thoroughly review each SOC model, including virtual SOCs. You’ll learn how to select the right strategic option for your organisation, and then plan and execute the strategy you’ve chosen.

Security Operations Center walks you through every phase required to establish and run an effective SOC, including all significant people, process, and technology capabilities. The authors assess SOC technologies, strategy, infrastructure, governance, planning, implementation, and more. They take a holistic approach considering various commercial and open-source tools found in modern SOCs.

This best-practice guide is written for anybody interested in learning how to develop, manage, or improve a SOC. A background in network security, management, and operations will be helpful but is not required. It is also an indispensable resource for anyone preparing for the Cisco SCYBER exam.

• Review high-level issues, such as vulnerability and risk management, threat intelligence, digital investigation, and data collection/analysis
• Understand the technical components of a modern SOC
• Assess the current state of your SOC and identify areas of improvement
• Plan SOC strategy, mission, functions, and services
• Design and build out SOC infrastructure, from facilities and networks to systems, storage, and physical security
• Collect and successfully analyse security data
• Establish an effective vulnerability management practice
• Organise incident response teams and measure their performance
• Define an optimal governance and staffing model
• Develop a practical SOC handbook that people can actually use
• Prepare SOC to go live, with comprehensive transition plans
• React quickly and collaboratively to security incidents
• Implement best practice security operations, including continuous enhancement and improvement

The full text downloaded to your computer

With eBooks you can:

• search for key concepts, words and phrases
• make highlights and notes as you study
• share your notes with friends

eBooks are downloaded to your computer and accessible either offline through the Bookshelf (available as a free download), available online and also via the iPad and Android apps.

Upon purchase, you'll gain instant access to this eBook.

Time limit

The eBooks products do not have an expiry date. You will continue to access your digital ebook products whilst you have your Bookshelf installed.