Security Operations Center (SOC) Explained

If you have a problem in cybersecurity, where do you turn? Modern organizations have a "SOC" or security operations center. Its mission is focused on detection and response; in this video, Jeff "the security guy" Crume explains the people, process, and tools involved. To ground the discussion, Jeff presents three security incidents and explains how they're handled by the SOC.


#AI #Software #Dev #lightboard #IBM #JeffCrume #QRadar #SOC

[chanyuan-cvop]

I especially like this teacher‘s lecture style, which is easy to understand and gives vivid examples!!! Update more 😮

[ykjthxb]

one of the best video i have seen so far in SOC - easy to understand and follow

[VNQUHR]

It's a blessing to have a teacher like you sir! Really great concepts, Thankyou!!!!

[conwayniall]

Love it, great explainer ❤ keep up the great work!!

[hassuk]

This was excellent, thanks for sharing.

[angelkern]

It would be helpful to show how the Incident Response Team (IRT) works with the SOC. Some IRTs have an operational objective of being the Threat Hunters or Pen Tests.

[kaushalvedant]

Please provide information on IBM NOC service.

[jdev_fr]

You're leaving Prevention aside.
Is the soc not evaluating and using lists of known bad actors to pre filter their traffic or help automate response in the siem?

[haraldhwick]

Haven't used a SOAR. Had Cases where T1s are doing T2/T3 and Threat hunters work load is already astounding.

Yet to see how many companies do avail the bare minimum for compliance, that must be a wow.

literally had occurrence where clients are knowledgeable more than the vendor support.


How is burnout outlook for cyb personnel in this industry for the next 10 years?

It surely is sending a fraction of people to switch to red team work and skillset, or go grey. That itself is already a risk to the industry is it not?

Skill personnel shortage, out of scope work, burnout rates. Misconfigured MSP Teams...

Cyber is one of those industries you'd come to love/hate.

[ashfaqahmed]

Will ai also affect cyber security jobs?

(Can you guys also give me a detailed roadmap of getting into cyber security. I'm a civil engineering graduate trying to get into cyber security.
Pls comment the roadmap from initial position to senior level. Thanks in advance)

[hmm_think]

Can you share your screen and show what do you really mean?

[manhoosnick]

I'd love to start a career in CyberSec, are there any IBM certs or apprencitceship or anything that can help me ? Thanks a lot

[darylallen]

Lol, I thought you were gonna explain SOC - System On a Chip 😂

[matelaszlo]

no need for having seperate levels, its old fasion. no need to have manager role. we need a tech leader with extensive cyber sec knowledge. team management is an old topic which is gone in new modern organisation.