The Security Operations Centre’s operational capability depends upon two interconnected foundations whose combined quality determines whether the people and the processes the SOC deploys can function at the level the security mission demands. The first is the physical environment whose design, security controls, and operational facilities create the protected workspace within which the SOC’s activities occur. The second is the technology platform architecture whose integrated components create the detection, the intelligence, the response, and the reporting capabilities that the SOC’s operational services deliver. Together these foundations constitute the SOC’s infrastructure layer whose governance the ISO must treat as the prerequisite investment that the operational excellence requires to be in place before the human capability and the process discipline can produce the security outcomes the governance programme demands.
Keep reading with a free Eristotle account.
Every document across our Bodies of Knowledge is free to read once you are signed in. No payment, no tier.
