MAIN PROBLEMS WORKING WITH SECURITY OPERATION CENTER

Abstract

Nowadays cyber threats are steadily increasing and their quality is improving in terms of techniques and tactics. To monitor, detect, and subsequently respond to information security incidents, organizations are establishing Security Operation Centers (SOC) or Information Security Monitoring Centers. This article discusses important challenges that IT professionals face when dealing with information security monitoring centers. Understanding these problems will enable newcomers to avoid mistakes when working with information security monitoring centers, and for experienced professionals it will serve as a vector for improving monitoring center.