Security - Team
SOC
(Security Operations Centre)
The team responsible for continuously watching for and responding to security threats
What's it for?
Gives an organisation a team responsible for watching for and responding to security threats.
For example…
Security staff spot suspicious overseas login attempts and lock the account
The SOC sees a suspicious authentication alert, investigates related endpoint activity and coordinates containment when it confirms an account compromise
Think of it like…
Building control room that watches cameras and dispatches guards when something looks wrong