Organisations should build a computer incident response team, not a security operations centre
By Rob Lay
Building a security operations centre (SOC) capability is a complicated and time consuming exercise and often does not deliver the value or results that organisations desire.