A Story About Telling Stories

• First Principles and Terminology

Steering Committee – Phase 1: Design

• Requirements
• Impact
• Charter

Functional Components

• Presumed Organizational Support Functions
• Functional Arrangements
• Operational and Architectural Considerations
• SOC Organizational Position
• Multi SOC Models
• SOC and IT Relations
• Size and Maturity
• Size: What Does It Look Like?
• Outsourcing Advice

Intro

• Command Center
• Network Security Monitoring
• Threat Intelligence
• Incident Response
• Forensics
• Self Assessment

• Defensive Topology
• Steering Committee: Phase 2: Build

Functional Area Work Products

• Technology Selection
• Physical SOC Build
• Technology Selection
• Cultural and Organizational Influence on SOC Requirements and Performance
• Forensics
• Orchestration and Automation

Analytical Methodology for the SOC

• Applied ACH
• Available Frameworks for Analysis
• Analytical Methodology: Wrap Up

• Roles
• Hiring
• Onboarding
• Training
• Meetings
• Retention

Steering Committee: Phase 2: Build

• Tempo
• Pre-Forensics
• Threat Hunting
• Use Case Development

• Introduction
• Appropriate Audience
• Reported
• Steering Committee: Phase 3: Operations
• Service Level Objectives
• SOC Internal Health and Performance

• Introduction
• SOC-CMM Walkthrough

• Process list
• Sequence Walk Through

• Phin Phisher
• Insiders
• Equifax