Skip to content

What is SOC? Definition and explanations

A SOC (Security Operations Center) is the team and organisation responsible for monitoring, detecting, triaging and handling an organisation's security events. It relies on tooling — SIEM, EDR, threat intelligence — but its value comes from people, procedures and hours of coverage. Many SMEs reach it as a managed service rather than an in-house team.

In one sentence

A SOC is the team that monitors, triages and handles an organisation's security events.

Related terms

Sources and references

Glossary