THE HUMAN FACTOR CAPABILITIES IN SECURITY OPERATION CENTER (SOC). Issue 1 (3rd July 2022)

• Record Type: Journal Article
• Authors: Chamkar, Samir Achraf; Maleh, Yassine; Gherabi, Noreddine
• Is Part Of: EDPACS. Volume 66:Issue 1(2022)
• Page Start: 1
• Page End: 14
• Publication Date: 2022-07-03
• Subjects: Electronic data processing -- Auditing -- Periodicals; Computers -- Access control -- Periodicals; Electronic data processing departments -- Security measures -- Periodicals; 005.8
• DOI: 10.1080/07366981.2021.1977026
• Languages: English
• ISSNs: 0736-6981

Abstract

Abstract: The human factor is considered the weakest link in cybersecurity and inside the Security Operation Centers (SOC) and it represents the most important component at the same time. Human factor capabilities and challenges attracted the attention of researchers to address how these challenges can be reduced or mitigated. However, these research papers do not consider the complexity, unpredictability, interdependent and evolving nature of the SOC systems. This study aims to explore the human capabilities and weaknesses inside the Security Operation Centre. To this end, we employed survey bases questionaries alongside the daily observation of SOC analysts and interviews with SOC experts. Forty SOC analysts and five experts conducted the survey. The finding of this study will help SOC managers and SOC designers better understand the challenges faced by the SOC analysts and take into account the interdependent and evolving nature of the Security Operation Centers.