Session Title | Security Operations Center and Effectiveness

It is becoming increasingly common for organizations to set up Security Operations Centres (SOCs) to centralize their information security operations. The aim is to create an effective, highly focused resource for both detecting and responding to threats. But while it seems like a good idea and can result in impressive capabilities, the actual improvements in security can be more modest than expected. When it comes to building security operations, there are a thousand directions one can go, and with every choice comes risk. The security landscape changes, seemingly minute by minute, and the need for ensuring that consistent, reliable security operations are properly configured, staffed, and trained becomes more important with every passing event. This talk delivered by CyberX is touching upon SOCs myths, maturity, and effectiveness.