SOC — Security Operation Center

SCOPE OF WORK

The service

Organising security monitoring and alert handling for systems covered by the service.

Service activities

• Defining event sources
• Analysis rules and escalation paths
• Alert reporting and scope review

Scope, technologies, activity frequency and support levels are agreed according to the context. Operating arrangements are defined before the service begins.

How the project works

1. 01
   Define

   Objectives, scope and responsibilities.

2. 02
   Deliver

   Agreed activities and evidence collection.

3. 03
   Report

   Findings, limitations and next steps.

Where to start

Describe the systems involved, the issue to address and the project contacts. In our initial discussion, we define objectives, required information and the approach to delivery.

Watch the Cyber-Med videos ↗