Security Operations Centre (SOC)

Through a comprehensive onboarding process and using the Client's chosen Security Information and Event Management (SIEM) platform, security-relevant data from the client’s enterprise network traffic is captured and analysed by the SOC for indicators of attack or compromise.  Our Security Analysts isolate genuine causes for concern from false alarms and develop a detailed understanding of a security event before escalating if necessary.  If further work is required CYSIAM initiates incident response protocols with the client.

The CYSIAM SOC is fully integrated with our dedicated Threat Operations capability including Cyber Threat Intelligence (CTI) and Threat Hunting specialisms, both of which are informed and enriched by our Full Membership of the globally-recognised Forum of Incident Response and Security Teams (FIRST) and Implementing Partner status with the invite-only Global Forum on Cyber Expertise (GFCE) based in The Hague.