Summary

This chapter discussed the role of the SOC in overseeing an enterprise’s information security visibility and response. We explored the SOC’s various responsibilities and the management and design considerations when planning for SOC tools. We also touched upon the different personnel roles within the SOC and the essential processes and procedures required for its operation. Additionally, we weighed the pros and cons of having an internal SOC versus outsourcing it. In the upcoming chapter, we will focus on the concepts of information security architecture and guide you through the steps to implement an information security architecture program.