A MATURITY CAPABILITY FRAMEWORK FOR SECURITY OPERATION CENTER. Issue 3 (4th March 2023)

• Record Type: Journal Article
• Authors: Taqafi, Issam; Maleh, Yassine; Ouazzane, Karim
• Is Part Of: EDPACS. Volume 67:Issue 3(2023)
• Page Start: 21
• Page End: 38
• Publication Date: 2023-03-04
• Subjects: Electronic data processing -- Auditing -- Periodicals; Computers -- Access control -- Periodicals; Electronic data processing departments -- Security measures -- Periodicals; 005.8
• DOI: 10.1080/07366981.2023.2159047
• Languages: English
• ISSNs: 0736-6981

Abstract

Abstract: Owning a Security Operation Center (SOC) is becoming increasingly common for organizations as part of their cybersecurity strategy to ensure near-real-time detection and adequately respond to cyber-attack engaging the SOC's humans, technology, and processes. However, SOC investments only sometimes achieve the best possible outcomes and only provide an acceptable protection level in some cases due to the challenges related to the technologies, processes and especially the human factor. This paper proposes a new practical maturity framework for Security Operation Center. This will serve as a roadmap for IT auditors and security experts when they evaluate the maturity of a security operation center in terms of safeguarding the assets of the company, its partners, and its clients.