Bob Young on Nostr: Does your company have a Security Operations Center (SOC), or are you considering ...

Does your company have a Security Operations Center (SOC), or are you considering one? Then pay attention, because you need to hear this. The choice between In-house SOC and Managed SOC doesn’t start with cost. You start with an analysis of EFFECTIVENESS and SUITABILITY for your organization’s security needs. IF and ONLY IF both options are effective and suitable for your organization, THEN you can compare cost.

Usually – and I mean 99 times out of 100 – only one option is both effective and suitable for your organization.

Example 1: A small company doesn’t have enough security incidents to maintain a full-time in-house staff. An in-house SOC isn’t suitable. In this situation, if any SOC at all is suitable, you’re comparing prices of competing managed SOCs, you’re not comparing in-house versus managed SOCs.

Example 2: A large company has enough incidents to maintain a full-time in-house SOC. The in-house SOC will provide better response times, more control, greater knowledge of the network and users, better communication with the IT staff, better communication with the CISO, better project coordination, and – I promise – better security, because of all of the things I just mentioned.

The managed SOC has to pay their people, pay for their infrastructure, AND make a profit. There is no way the managed SOC can provide the same level of service without charging you more than it would cost you to do it yourself.

Their infrastructure is only fractionally concerned with your network.
Their SOC analysts are only fractionally concerned with your network.

#CallMeIfYouNeedMe #FIFONetworks

#cybersecurity #SOC