Future SOC: SANS 2017 Security Operations Center Survey

Security operations centers (SOCs) are growing up, according to our new SANS survey. Respondents indicated that the SOC's primary strengths are flexibility and adaptability while its biggest weakness is lack of visibility: SOCs still can't detect previously unknown threats, which is a consistent problem across many other SANS surveys. The survey also found a need for more automation across the prevention, detection and response functions--particularly in prevention and detection, where the tools respondents use are mostly the same.