SOC Operations Assessment
A comprehensive evaluation of the capabilities and maturity of an organization's Security Operations Center, covering breach readiness and incident response.
What gets assessed.
Technology
A high-level evaluation of SOC technologies and tools to determine effectiveness and identify gaps.
Staff Capabilities
Evaluates skills, experience, and training against the tasks the team is expected to perform.
Organizational Fit
Covers scope, mission, policy, documentation, business alignment, and facility requirements.
Four phases.
Technology Evaluation
Assess tooling effectiveness and identify gaps.
Staff Assessment
Evaluate skills and training against operational requirements.
Organizational Review
Assess organizational structure, business alignment, and physical infrastructure.
Roadmap Development
Build an improvement roadmap based on assessment findings.
Where this connects.
SOC Framework Development
Builds the processes, playbooks, governance and metrics this assessment measures against.
Red Teaming
Training-led engagements exercise the detection capability the assessment grades on paper.
Security Monitoring
Where the assessment concludes the capability is better bought than built.
Common questions.
Do we need an existing SOC for this?
Yes. This assessment evaluates a SOC that is already running. If you are building the function from scratch, SOC Framework Development is the engagement that applies.
Is this only a review of our tooling?
No. Technology is one of three evaluation areas. The assessment also covers staff capabilities, measured against the tasks the team is expected to perform, and organizational fit, covering scope, mission, policy, documentation, business alignment, and facility requirements.
What do we receive at the end?
A SOC Maturity Assessment Report setting out the findings, and a future roadmap for improvement built from them.
Does the assessment cover incident readiness?
Yes. The evaluation covers the SOC's capabilities and maturity including breach readiness and incident response.