In our commitment to keeping Europe safe, we are happy to announce that we have achieved Gold partnership status with SOC-CMM.

As a leading European cybersecurity consultancy firm specializing in SOC, MDR, CSIRT, and other services, we serve a variety of sectors including finance, government, aerospace and manufacturing. We have addressed key SOC challenges such as alert fatigue, business buy-in, building a solid security technology stack, and other typical or atypical challenges seen in diverse SOCs today.

Our SOC expertise includes designing and implementing custom architectures that enhance threat detection and incident response capabilities, as well as conducting assessments leveraging the SOC-CMM framework.

SOC-CMM is a capability and maturity measuring instrument for SOCs, focusing on five main domains: Business, People, Process, Technology, and Services.

A common observation is that SOCs typically have a strong focus on solutions, yet technology is only one piece of the puzzle that makes a successful SOC. For example, the People domain underscores the importance of having SOC analysts who receive sufficient training to perform their work efficiently. With our ability to collaborate with our customers rather than working in isolation, we achieve a solid roadmap together with actionable and prioritized recommendations that ensures a capable, mature, and future-proof SOC across the board.

Every domain has its own opportunities to identify actionable recommendations, flavored with prioritization and required effort. 

For example:

• Business: identify the SOC mission statement and document this in an approved SOC charter.  This gives the SOC the required formal mandate to operate inside the organization.
• People: SOC-CMM helps you to detect where in the SOC team the biggest resource gap is located, and this supports a recruitment program and influences the org chart and training program.
• Process: the lack of a continuous improvement process affects the SOC service delivery and effectiveness, as threats continuously evolve as well. 
• Technology: the lack of a SOAR development process and a service description seriously affects the Return of Investment (ROI) of such tooling.  SOC-CMM helps to identify where to focus on first: playbook definition, process development or technology investment.
• Services: in a hybrid SOC, services can be scattered between an MSSP and an internal team. Service descriptions for the most crucial components of the SOC are essential for smooth cooperation.

Being a SOC-CMM Gold Partner allows us to offer enhanced strategic support to you. Some examples of how we can assist include:

• SOC Charter, vision, and mission; ensure clear operational goals,
• SOC Target Operating Model (TOM); supporting the management layer,
• Creation of a roadmap to achieve success for the SOC; with specific recommendations on how to improve each domain, both from a high-level and low-level perspective.

Whether you're running the SOC by yourself, in a hybrid model, or fully with an MSSP, contact us today to learn how we can collaborate to help you improve.