A company can build its own SOC.
This includes, in particular:
- analysts
- security engineers
- SIEM engineers
- procedures
- possible on-call duty
- tools
- training.
It can also outsource part of the system to a:
MSSP — Managed Security Service Provider.
The service provider can cover all or part of the cost:
- collection
- supervision
- detection
- analysis
- notification
- answer.
The choice depends on:
- the size
- internal skills
- the budget
- regulatory constraints
- the level of maturity
- criticality.