Cybersecurity – Security Operations Center

Abstract

Currently, most organizations are dependent on Information and Communication Technologies, in the sense of accomplishing their underly­ing business activities. In this scope, cybersecurity is considered the domain that has the strength to protect sensitive information, be it at the individu­al level or in an organizational context. The objective of this paper is to in­troduce the concept, relevance, and functions of a Security Operations Cen­tre. The methodology underlying the study was based on the use of the MI­TRE Adversarial Tactics, Techniques and Common Knowledge framework as a matrix of tactics and techniques based on real scenario observations. The main results emphasize the importance of incorporating the Security Oper­ations Center as a barrier against cybersecurity threats. Security Operations Center brings additional value to the organizational context, through peo­ple, processes and technologies while also using several frameworks to im­prove work management, incident response and incident control.