Should we outsource the SOC or build one?
Most companies under a few hundred people outsource it or do without a full SOCSOC: security operations centre. A team, often working around the clock, whose job is to watch for and respond to attacks., because round-the-clock coverage needs several trained people, not one. A SOC (security operations centre) is a team that watches alerts and responds, often around the clock. Building one means hiring and keeping analysts for night and weekend shifts, buying and tuning tools, and writing procedures; for a mid-sized company that is a large fixed cost. Outsourcing to an MDRMDR: managed detection and response. A service in which an outside team watches your alerts and responds for you. or MSSPMSSP: managed security service provider. A company that runs security monitoring for other companies. provider turns it into a contract, but you still need someone inside who knows your business and makes decisions. A middle path suits many: automated detection that runs at all hours, alerts explained well enough for a generalist, an on-call arrangement with your IT provider, and an incident-response firm on retainer. NetSenX fits that middle path as detection software; it is not a SOC and nobody at NetSenX watches your alerts for you.
Read next
Related questions
Terms used here
- SOC (security operations centre)
- A team, often working around the clock, whose job is to watch for and respond to attacks.
- MDR (managed detection and response)
- A service in which an outside team watches your alerts and responds for you.
- MSSP (managed security service provider)
- A company that runs security monitoring for other companies.