EP58 SOC is Not Dead: How to Grow and Develop Your SOC for Cloud and Beyond

Guests:

• Alexi Wiemer, Senior Manager at Deloitte Cyber Detection and Response Practice
• Dan Lauritzen, Senior Manager at Deloitte Cloud Security Practice.

Topics:

• What is your key learning about the state of SOC today? What one SOC trend are you hearing the most or most interested in?
• What is your best advice to SOCs that are permanently and woefully understaffed?
• Many SOC analysts are drowning in manual work, and it is easy to give advice that "they need to automate." What does this actually entail, in real life?
• What is, in your view, the most critical technology for a modern SOC? Is it SIEM? Is it SOAR? Is it EDR?
• What is the best advice for a SOC that was handed cloud on a platter and was told to monitor it for threats?
• Occasionally, we hear that "SOC is dead." What is your response to such dire SOCless predictions?

Resources:

• "New Paper: "Future Of The SOC: Process Consistency and Creativity: a Delicate Balance" (Paper 3 of 4)"
• "New Paper: "Future of the SOC: Forces shaping modern security operations""
• "New Paper: "Future of the SOC: SOC People — Skills, Not Tiers""
• "New Paper: "Autonomic Security Operations — 10X Transformation of the Security Operations Center""
• "A SOC Tried To Detect Threats in the Cloud … You Won't Believe What Happened Next"
• "Why Your Security Data Lake Project Will FAIL!"