The Security Operations Centre

The SOC ingests and correlates the laboratory’s security telemetry — network traffic plus the logs of external services such as Google Workspace and Microsoft Azure — looking for the anomalies that a firewall alone will not catch. Its expansion was one of the concrete outcomes of the cis-v8-audit.

---

Topology

• Part of: security-governance
• Complies with: cis-v8-audit — its expansion came from the audit.
• Cites: security-audited-for-the-better — the SOC’s scope.