A centralized unit that monitors, detects, investigates, and responds to cybersecurity incidents around the clock. SOC teams use SIEM tools, threat intelligence, and incident response procedures to protect organizational assets.
Related Terms
Incident Response Plan
incident-responseA documented set of procedures for detecting, responding to, and recovering from security incidents. An effective plan i...
Security Information and Event Management (SIEM)
incident-responseA solution that aggregates and analyzes security log data from across an organization's IT infrastructure to detect thre...
Threat Hunting
incident-responseThe proactive process of searching for cyber threats that have evaded existing security controls. Threat hunters use hyp...