Security News > 2020 > April > Running a more efficient IT security operations center: How to keep tasks on target
IT security is one of the most important tasks a business deals with on a daily basis, and as a business grows, it's critical to reevaluate how a company's security operations center is performing.
These are some of the trends and recommendations being made by the Cyber Resilience Think Tank, an independent group of industry security leaders, in a new nine-page report, "Transforming the SOC: Building Tomorrow's Security Operations, Today." Published by email and via the data security vendor Mimecast, the report lays out strategies and questions that should be asked as organizations of any size work to create or update their SOC procedures and protections.
For any business, an SOC is a team of IT security analysts and experts who are tasked 24/7 with monitoring, evaluating, and defending a company's security operations, and managing attack vectors that are being targeted by cybercriminals.
Another trend highlighted in the report is how increased automation can help make SOC workers and teams even more effective by broadening their tools and strategies that can be used to better protect a company's IT assets.
"You have to check your blind spot at pseudo-random intervals to see who's hiding there because the machine will become predictable and therefore exploitable. So, the mission is not to automate for the sake of it, but to make the humans more effective, improving the value of their output without weakening the whole." Also worth evaluating regularly in a company's SOC are the minute details, such as whether SOC analysts are literally sitting near enough to each other to promote the greatest operational efficiency in the department, the report said.