SOC SOPs

[orionquest]

i am in the process of moving our SOC in house from a MSSP and have created SOPs for monitoring, IR, etc

want to ensure what i have created is inline with what others use.

would anyone be willing to share their SOPs as reference (of course with any confidential content redacted)

thank you

[Caute_cautim]

@orionquestI am not sure you will get many taker, given that this area is so competitive these days:

1)  People throw lots of Security Analysts at it but expect burn out

2)  AI and ML has revolutionised this area, and in fact we have factual proof it has made Security Analyst's up to 60% or more efficient and effective.

3)  You have to be very clear exactly what type of SoC you are producing the SOPs for, physical security, information security and what framework you are using as well.

4)  There is plenty of vendors willing to sell you the technology, however the real value is in the processes and procedures earned over time with experience.

Regards

Caute_cautim