Conclusion: the operational safety center, as a project and a process

This article describes, with examples, the objectives, components and roles of the SOC. Setting up an operational security center is both a project, which presupposes prerequisites and a formalized study of security needs (particularly the associated risks), and a process, i.e. a recurring activity that relies on an existing system and involves maintaining it in operational condition, and a decision-making capacity to support the alert process that this system will generate.

We take the view that the SOC is not just a technical device, but above all a set of services designed to detect, prevent and react to cyber threats. The risk-based approach is the common thread running through the justification and relevance of the SOC system. We use the term "system" because it is a system that contributes to risk management. In fact, it is one of the key elements in our ability...