From: CSO
Security operations centers (SOC) have been around for a while, stretching back to the old room full of live camera feeds. The intent of a SOC is simple: provide the business with the ability to see what is going on in order to take action if necessary. The level of SOC sophistication varied depending on the risks and infrastructure complexity. Consider the humble stretch of road and an analogy for businesses in the very early days of the internet: In low risk, low traffic areas, it was often not necessary to have a constant additional surveillance of this road. Road rules — basic perimeter-based network security measures like firewalls — still applied, but it was considered sufficient for any out-of-the-ordinary incidents to be handled reactively.
Then, when a stretch of road became busy, speed limits might have be reassessed. A stop sign might have been introduced. Then a traffic light. Then live monitoring of an intersection.
Leave a Reply