Building A Teaching / Improvement Focused SOC

Effective security monitoring is an ongoing process. How do you get everyone participating? How do you on-board junior colleagues to continuous improvement? The purpose of this presentation is to show methods for encouraging participation from all members of the security monitoring team as well as tactics for communicating effective with the organization.This presentation will cover the methods I’ve employed for a teaching / improvement focused SOC. Our practice has been focused around partnering analysts with business units to demonstrate our value as well as identity oppertunities for our improvement.