NCSC publishes factsheet Building a SOC: start small
An increasingly common way to achieve visibility and control of information security is to implement a Security Operations Centre (SOC). In order for a SOC to function successfully, it must be tied in with the business processes. This makes building a SOC a major challenge. Due to the many organizational and technical issues that come to mind when setting up a SOC, it may be difficult for a newcomer to find a correct approach.
In this factsheet, the NCSC-NL advices to start small and to grow along with the organisation’s need for insight.