SOC (Security Operations Center)

The SOC is the nerve center of an organization's security operations, combining people, processes, and technology to protect systems, networks, and data around the clock. SOC teams operate in tiered structures with analysts at different levels of seniority handling different types of work. The effectiveness of a SOC is measured by metrics like MTTD, MTTI, and MTTR, as well as the quality and consistency of its investigation outputs.