SOC - Security Operations Center - What is the proactivity expected by CIO’s?

IT publications have emphasized the fact that the adoption of service models focused on security assume, day after day, greater relevance in corporate strategies, due to the new work structure generated by the use of the internet. Data preservation has become a priority and one of the resources to obtain more security is the adoption of a SOC - Security Operations Center.

SOC is an operational area focused on the security of information of the entire IT environment of a company. It is a centralizer of security services that aims to obtain better prevention (good incident prevention practices); detection (problem identification); incident response (agile problem solving); vulnerability assessment (monitoring of all systems in use), helping to fight cybercrime. 

To implement a SOC, it is necessary to define an appropriate strategy for the business, the information generated and the tools used in the company. The infrastructure is created from specific investment, training of trained staff or consulting assistance. CIO’s must be aware of the cost and personnel implications involved and carry out planning that involves: cost-benefit analysis of existing SOC models; alignment of deliveries with business objectives; identification of critical internal security functions; creation of a retention strategy for trained personnel.

According to Gartner, in 2019, in response to numerous alerts, SOCs began to focus even more on threat detection, alert management and proactive responses, making greater investments, resources and time available for this. In view of the new needs, CIOs propose to continue the projects initiated, while making room for emerging technologies, always in compliance with the General Data Protection Regulation (GDPR), in order to keep IT aligned with cutting-edge technology, while simultaneously delivering agility , proactivity and security.