Customers often ask my company if they should spend the resources to build their own SOC, get a managed service provider (MSP), or do some kind of hybrid model. I'm trying to create some kind of rubric or flowchart in order to outline some of these things and give a roadmap.
My idea is centered around mostly budget, business requirements, level of maturity of the organization, and technical staff.
I've been looking for resources to help guide me and have read through MITRE's guide to building a world class SOC and a few other things. However, I was looking for more material geared with business and cost in mind.
If anyone knows of any material that might help me in this endeavor, pass it along!
