To SOC or not to SOC ?

So, you are implementing a large digital project, and have followed the GOV.UK Service Manual through each phase of the project.

You’re now ready to go live, but the accreditor for the project needs to know if the service has ‘protective monitoring’. Which means the team needs to spend time and effort procuring (or setting up) a https://www.ncsc.gov.uk/collection/building-a-security-operations-centre” target=”_self”>Security Operations Centre (SOC).

Or does it?

Building a SOC is a task that requires a lengthy investment of both time and money. This blog considers whether it’s possible for organisations to design systems in such a way that a ‘full-fat’ SOC is not required.

Original Source: ncsc[.]gov[.]uk