pdf

HP - Building a Successful SOC 2014.pdf
Hp Building A Successful Soc 2014

Resource covering SOC titled 'Hp Building A Successful Soc 2014'.

This page contains AI generated content. Errors or omissions may be present. Use human level critical thinking.
  • Q: What are the three primary components of HP's SOC framework?
    A: People, Process, and Technology.
  • Q: What is the recommended 'Analyst-to-Device' ratio?
    A: It varies by complexity, but generally one analyst can monitor a specific volume of events; over-loading leads to missed alerts.
  • Q: What is the 'Tiered' staffing model described?
    A: Tier 1 (Triage), Tier 2 (Investigation/Response), and Tier 3 (Advanced Forensics/Hunt).
  • Q: What is the importance of 'Use Cases' in building a SOC?
    A: They define exactly what the SOC is monitoring for (e.g., 'Phishing', 'Data Exfiltration') and drive the technology configuration.
  • Q: How does HP define 'Situational Awareness'?
    A: The ability to correlate technical events with business criticality to understand the true impact of an incident.
  • Q: What is the role of the 'SOC Manager'?
    A: To oversee operations, manage the budget, ensure SLA compliance, and report to executive leadership.
  • Q: What technology is central to the SOC according to this paper?
    A: ArcSight SIEM (Security Information and Event Management).
  • Q: What is the 'Hybrid' model mentioned?
    A: Combining internal SOC capabilities with managed security services for specific functions (e.g., after-hours monitoring).
  • Q: Why is 'Career Path' important for SOC analysts?
    A: To prevent burnout and turnover; analysts need to see a progression from Tier 1 to Tier 3 or management.
  • Q: What metric is suggested to measure 'Efficiency'?
    A: The number of incidents closed per analyst per shift, balanced against the quality of the investigation.

Ask a question

Have a doubt or need clarification?



I’m here to help. Share your question, and I’ll get back to you with the guidance you need regarding the course.

Thank you!

I have received your message and I shall get back to you shortly.