Design and implementation of a security operations center in a business

Abstract

In this project we want to expose what is a Security Operations Center (SOC) and why companies need its services. We will try to list some of the most famous and usual threats and malicious activity a company is exposed to, and the tools required to prevent and detect them. We will try to explain the 3 main sections of a SOC team and their purpose: Auditing, Vigilance and SIEM. Providing a global view of the SOC actions and responsibilities will allow us to understand how the information technology in the corporate world is gaining importance. As a conclusion, we will try to summarize the knowledge acquired in the investigation and experience by summarizing an implementation of a SOC in an example Law firm company.