This page is fully or partially automatically translated.

Send message to

Do you want to send the message without a subject?
Please note that your message can be maximum 1000 characters long
Special characters '<', '>' are not allowed in subject and message

Your message has been sent

You can find the message in your personal profile at "My messages".

An error occured

Please try again.

Make an appointment with

So that you can make an appointment, the calendar will open in a new tab on the personal profile of your contact person.

Create an onsite appointment with

So that you can make an onsite appointment, the appointment request will open in a new tab.

Header of ConSecur GmbH
Forums it-sa Expo 2023 Knowledge Forum A

How not to build a SOC - Things that fall on your feet afterwards

15 minutes is not enough to explain to you how to build a SOC. So I'll explain how not to do it.

calendar_today Tue, 10.10.2023, 14:15 - 14:30

event_available On site

place Knowledge Forum A

Action Video


Action description





SIEM / Threat Analytics / SOC

Key Facts

  • Structure SOC
  • IT Risks
  • Managed SIEM



This action is part of the event Forums it-sa Expo 2023

Action Video

grafischer Background

This video is available to the it-sa 365 community. 
Please register or log in with your login data.

Action description

“Guys, we are now building a SOC! Nobody really knows what it is or how it works – but everyone else has it too.” I sometimes imagine how those responsible approach this topic in one way or another. The idea isn't wrong either: see what's happening in IT. Recognize risks, attacks and vulnerabilities and act quickly and correctly; these are the challenges that companies have to face if they want to continue to pay as little or no ransom as possible in the future.
Are you toying with the idea of building a new Security Operation Center (SOC) or expanding an existing SOC? No? Also okay: This tongue-in-cheek article should also be of interest to you if you just want to have the reassuring feeling that other people can't do it any better either.
We all make mistakes. Sometimes they are so obvious that we immediately think "What did I do there?" and sometimes they are things that we do with the best of intentions, but then fall on our feet at a later point in time. Building SOCs is no exception. In the past 10 years, my colleagues and I have experienced one or the other anecdote when setting up or converting SOCs that I would like to share with you. I mean, who can guess that a Batcave isn't a suitable place to set up an ops floor?

Who is ConSecur?
ConSecur designs and operates IT security solutions for companies and organizations that are tailored to existing IT infrastructures and reach the next level of information security.
Conception, construction and operation are our strengths. We operate IT security solutions permanently in our Cyber Defense Centers in Meppen and Bochum.
... read more

Language: German

Questions and Answers: No


show more
Remember Remove

This content or feature is available to the it-sa 365 community. 
Please register or log in with your login data.