SOC vs. MDR: What CISOs need to consider | TechTarget

Every modern organization must monitor its networks continuously and respond to suspicious or malicious activity quickly and effectively. Two basic options exist: an in-house security operations center or a managed detection and response service. Some organizations use both.

Let's examine how SOC and MDR services compare and identify key considerations when choosing the best option for your organization.

SOC and MDR overview

Traditionally, SOCs underpin how most companies manage security monitoring, detection and response. SOC analysts work shifts around the clock, seven days a week. These staffers are trained to comb through alert messages and identify red flags across the organization's systems. When analysts think an incident is likely or has occurred, they notify incident responders to handle it.

SOCs are usually housed in dedicated, secure physical spaces because the information the analysts discuss could be highly sensitive, including details of vulnerabilities, exploits, data breachesand insider threats. SOCs provide...

Copyright of this story solely belongs to techtarget.com. To see the full text click HERE