Model for successful development and implementation of Cyber Security Operations Centre (SOC)

Area of Science:

• Information Security
• Cybersecurity Management

Background:

• Cyberattacks are increasingly sophisticated, causing significant organizational disruption and financial losses.
• The development and implementation of Cyber Security Operations Centres (SOCs) are critical for mitigating these threats.
• Existing research indicates a lack of international guidelines and standards for successful SOC implementation.

Purpose of the Study:

• To identify critical success factors for SOC development and implementation.
• To design a model for the successful establishment and operation of SOCs within organizations.
• To address the gap in standardized frameworks for SOCs.

Main Methods:

• A quantitative study was conducted with 63 respondents from 25 Malaysian ministries and agencies.
• Data analysis involved descriptive statistics and regression testing.
• The study focused on identifying success factors related to human, process, and technology elements.

Main Results:

• Ten key success factors for SOCs were identified, emphasizing human, process, and technology aspects.
• Top management support was found to be the most influential factor in descriptive analysis.
• Regression analysis revealed that technology and process factors have a greater impact on SOC success than human factors.

Conclusions:

• The study proposes a model for successful SOC development and implementation.
• Findings highlight the significant impact of technology and process factors on SOC effectiveness.
• The proposed model and findings can guide organizations in policy formulation, human resource development, and overall cybersecurity enhancement.