
CISO MindMap Podcast
Featuring Rafeeq Rehman, the creator of the CISO MindMap, each week we discuss topics related to the functions of the Chief Information Security Officer. Topics range from the technology needed for cybersecurity to the key business functions that are critical to the success of the CISO and their teams.
CISO MindMap Podcast
CMM 8 - Building or Outsourcing Your SOC
Send us fan mail via text by clicking here!
In this episode, Rafeeq and Scott discuss the many considerations involved with building your own Security Operations Center SOC. While in no way a comprehensive analysis, the discussion attempts to make the concepts manageable. If you're a small company growing past a few IT headcount, the topic should help you create a vision for your situation. If you’re a larger company and looking to expand, these pointers may be of help
This conversation focused on budgeting, structure, and decision-making processes, including the choice between building in-house or outsourcing. The discussion covered various aspects of SOC operations, such as staffing requirements, skill development, and the importance of continuous learning in the face of evolving threats. Also emphasized is the need for proper shift management, stress tolerance, and the value of tabletop exercises and purple teaming in assessing SOC effectiveness.
Rafeeq wrote a great book on this topic. Have a look on Amazon here.
Check out the calculator Rafeeq mentions in the podcast here.
https://rafeeqrehman.com/
https://www.linkedin.com/in/scott-a-hawk/
https://www.linkedin.com/in/rafeeq/