On April 27, 2023, the first “Insights SOC” discussion round took place as part of the GFFT* Security Lab under the technical direction of SECUINFRA. Ramon Weil, Founder and CEO of SECUINFRA, shared his more than 20 years of experience in setting up and operating Security Operation Centers (SOC) with the 25 or so participants in the panel discussion. By taking over the technical management of the GFFT Security Labs on the topic of SOC, Ramon Weil is pursuing the overarching goal of sustainably increasing cyber resilience in Germany.
The most pressing challenge quickly became clear during the lively discussion: Above all, there is a lack of experts to use the many security tools that have been purchased. Companies often have a wide variety of security tools, but still have an unclear security situation and insufficient options for detecting attacks in good time and thus protecting companies from potential damage. Active monitoring of the security situation is limited due to a lack of resources.
The elimination of the shortage of specialists was discussed just as actively as the various technologies to be used. The advantages and disadvantages of outsourcing as a fully comprehensive managed detection and response (MDR) service or as a cooperative co-managed detection and response (Co-MDR) were also discussed.
The conclusion of the panel discussion: A functioning SOC requires experienced analysts in particular, who have to be painstakingly recruited on the market and retained by the company in the long term. As an alternative, MDR and co-MDR services from specialized service providers such as SECUINFRA are available.
*Society for the Promotion of Research Transfer e.V.
