Reply to Message

Patrick, about ten years ago, I wrote a feasibility report on building a SOC for my employers back then. One thing to note is that if you're going to staff one for 24/7 operations, be preprared to hire five analysts, watchstanders, etc for every seat in the SOC. This will cover three shifts for weekdays, plus weekends and holidays. CERT.org has a lot of good documents which provide guidance on standing up a SOC.