{"id":450,"date":"2020-09-02T15:42:03","date_gmt":"2020-09-02T15:42:03","guid":{"rendered":"https:\/\/ptp.cloud\/ptp\/?p=450"},"modified":"2024-04-26T03:23:07","modified_gmt":"2024-04-26T07:23:07","slug":"the-fallacy-of-the-24x7-soc","status":"publish","type":"post","link":"https:\/\/ptp.cloud\/the-fallacy-of-the-24x7-soc\/","title":{"rendered":"The Fallacy of the 24×7 SOC"},"content":{"rendered":"[et_pb_section fb_built=”1″ _builder_version=”4.16″ _module_preset=”default” custom_padding=”0px||||false|false” da_disable_devices=”off|off|off” global_colors_info=”{}” da_is_popup=”off” da_exit_intent=”off” da_has_close=”on” da_alt_close=”off” da_dark_close=”off” da_not_modal=”on” da_is_singular=”off” da_with_loader=”off” da_has_shadow=”on”][et_pb_row _builder_version=”4.16″ _module_preset=”default” custom_padding=”0px||0px|||” global_colors_info=”{}”][et_pb_column type=”4_4″ _builder_version=”4.16″ _module_preset=”default” global_colors_info=”{}”][et_pb_text _builder_version=”4.16″ _module_preset=”default” global_colors_info=”{}”][\/et_pb_text][et_pb_video src=”https:\/\/www.youtube.com\/watch?v=sUbB5oRtFoY&feature=youtu.be” _builder_version=”4.16″ _module_preset=”default” global_colors_info=”{}”][\/et_pb_video][et_pb_text _builder_version=”4.25.0″ _module_preset=”default” hover_enabled=”0″ sticky_enabled=”0″]\n

When it comes to security, one of the most common buzzwords is “24×7 SOC.” It sounds impressive, implying that a team is constantly monitoring for threats and keeping everything secure. However, as Gary Derheim from PTP<\/a> explains, the idea of a 24×7 SOC might not be the best approach for all organizations, particularly mid-sized companies.\u00a0<\/p>\n

A Changing Perspective<\/h2>\n

To understand why the 24×7 SOC might not be the ideal solution, Gary uses a sports analogy. When he was a child playing soccer and running track, the norm was static stretching before events\u2014holding stretches for 10 seconds or more. Today, athletes focus on dynamic stretching, doing exercises that warm up muscles and reduce the risk of injury. This shift in thinking reflects an understanding that times change and new information can lead to better decisions.<\/p>\n

Similarly, in security management, particularly for mid-sized companies, the traditional focus on a 24×7 SOC may not be the most effective approach. Instead, companies could find more value by investing in other security tools and working with niche vendors.<\/p>\n

The Real Threats and How to Address Them<\/h2>\n

Some of the most significant threats that mid-sized companies face and suggests effective ways to address them without relying solely on a 24×7 SOC:<\/p>\n

1. Lost or Stolen Passwords<\/strong>: According to various studies, about 80% of breaches are due to lost or stolen passwords. This can be mitigated by implementing multi-factor authentication (MFA), a low-cost solution that significantly enhances security.<\/span><\/p>\n

2. Phishing Emails<\/strong>: Phishing emails are a common way that breaches occur, even when email filters are in place. Solutions that focus on phishing training and education are proving to be highly effective at preventing breaches.<\/span><\/p>\n

3. Out-of-Date Software<\/strong>: Basic software hygiene is crucial. Regular vulnerability assessments and timely patching of outdated software on servers and endpoints can prevent many security issues.<\/span><\/p>\n

Investing in these areas can provide robust security for a fraction of the cost of maintaining a 24×7 SOC.<\/p>\n

The Role of Security Monitoring<\/h2>\n

While security monitoring<\/a> and management are critical, the focus should be on scalability and the quality of the security monitoring process, rather than on continuous surveillance. The challenge with a 24×7 SOC is the high volume of alerts and the need to switch between platforms and tools. Instead, a viable solution that can aggregate and correlate events, allowing for effective management, is a more scalable approach for mid-sized companies.<\/p>\n

Quality Over Quantity<\/h2>\n

A key takeaway is that most alerts from security monitoring tools are likely to be false positives or low-level incidents. These often indicate that the security systems are doing their job by blocking unauthorized access attempts or triggering other expected activities. The real threats, such as malware, often require thorough investigation and a deeper understanding of the environment. Gary mentions that studies show that malware can remain undetected for 150 to 200 days, indicating that adversaries are not rushing in but rather moving quietly and cautiously.<\/p>\n

Therefore, rather than focusing on the 24×7 aspect of a SOC, organizations should emphasize the quality of the incident response process, including how incidents are prioritized, triaged, and resolved.<\/p>\n

What Really Matters<\/h2>\n

Instead of asking about the number of SOC analysts per shift or the size of the team, companies should focus on questions like:<\/p>\n

    \n
  • What’s the process for incident identification, triage, and resolution?<\/li>\n
  • What level of engineers will we engage with?<\/li>\n
  • How will you help us improve our security posture over time?<\/li>\n<\/ul>\n

    These questions get to the heart of effective security monitoring\u2014having a defined process, the right tools, and skilled people to investigate, understand, and respond to threats.<\/p>\n

    Conclusion: A New Approach to Security<\/h2>\n

    At PTP, the focus is on providing the best people with the best tools to work with clients in detecting, responding to, and recovering from security threats. This approach prioritizes quality over quantity, ensuring that organizations are well-protected without the unnecessary expense of a 24×7 SOC.<\/p>\n

    Ultimately, a robust security posture is about effective processes, tools, and people, rather than constant surveillance. It’s time to rethink the traditional approach to security and focus on what really matters.<\/p>\n[\/et_pb_text][\/et_pb_column][\/et_pb_row][\/et_pb_section]\n<\/span>","protected":false},"excerpt":{"rendered":"

    When it comes to security, one of the most common buzzwords is “24×7 SOC.” It sounds impressive, implying that a team is constantly monitoring for threats and keeping everything secure. However, as Gary Derheim from PTP explains, the idea of a 24×7 SOC might not be the best approach for all organizations, particularly mid-sized companies.\u00a0 […]<\/p>\n","protected":false},"author":1,"featured_media":492,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_et_pb_use_builder":"on","_et_pb_old_content":"","_et_gb_content_width":"","content-type":"","_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[83,10],"tags":[],"table_tags":[],"class_list":["post-450","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-learning-videos-archive","category-secops-archive"],"yoast_head":"\nThe Fallacy of the 24x7 SOC | PTP News<\/title>\n<meta name=\"description\" content=\"The security industry has trained customers to ask for and talk about the 24\u00d77 Security Operations Center (SOC).\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/ptp.cloud\/the-fallacy-of-the-24x7-soc\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"The Fallacy of the 24x7 SOC | PTP News\" \/>\n<meta property=\"og:description\" content=\"The security industry has trained customers to ask for and talk about the 24\u00d77 Security Operations Center (SOC).\" \/>\n<meta property=\"og:url\" content=\"https:\/\/ptp.cloud\/the-fallacy-of-the-24x7-soc\/\" \/>\n<meta property=\"og:site_name\" content=\"PTP | Cloud Experts | Biotech Enablers\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/PTPCloud\" \/>\n<meta property=\"article:published_time\" content=\"2020-09-02T15:42:03+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2024-04-26T07:23:07+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/ptp.cloud\/wp-content\/uploads\/2020\/09\/24x7SEC-post-feature.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"400\" \/>\n\t<meta property=\"og:image:height\" content=\"250\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"PTPstaff\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@PTPCloud\" \/>\n<meta name=\"twitter:site\" content=\"@PTPCloud\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"PTPstaff\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"1 minute\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/ptp.cloud\/the-fallacy-of-the-24x7-soc\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/ptp.cloud\/the-fallacy-of-the-24x7-soc\/\"},\"author\":{\"name\":\"PTPstaff\",\"@id\":\"https:\/\/ptp.cloud\/#\/schema\/person\/23219285c14844480b63688ae98ff7c5\"},\"headline\":\"The Fallacy of the 24×7 SOC\",\"datePublished\":\"2020-09-02T15:42:03+00:00\",\"dateModified\":\"2024-04-26T07:23:07+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/ptp.cloud\/the-fallacy-of-the-24x7-soc\/\"},\"wordCount\":831,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/ptp.cloud\/#organization\"},\"image\":{\"@id\":\"https:\/\/ptp.cloud\/the-fallacy-of-the-24x7-soc\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/ptp.cloud\/wp-content\/uploads\/2020\/09\/24x7SEC-post-feature.jpg\",\"articleSection\":[\"Learning Videos\",\"SecOps\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/ptp.cloud\/the-fallacy-of-the-24x7-soc\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/ptp.cloud\/the-fallacy-of-the-24x7-soc\/\",\"url\":\"https:\/\/ptp.cloud\/the-fallacy-of-the-24x7-soc\/\",\"name\":\"The Fallacy of the 24x7 SOC | PTP News\",\"isPartOf\":{\"@id\":\"https:\/\/ptp.cloud\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/ptp.cloud\/the-fallacy-of-the-24x7-soc\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/ptp.cloud\/the-fallacy-of-the-24x7-soc\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/ptp.cloud\/wp-content\/uploads\/2020\/09\/24x7SEC-post-feature.jpg\",\"datePublished\":\"2020-09-02T15:42:03+00:00\",\"dateModified\":\"2024-04-26T07:23:07+00:00\",\"description\":\"The security industry has trained customers to ask for and talk about the 24\u00d77 Security Operations Center (SOC).\",\"breadcrumb\":{\"@id\":\"https:\/\/ptp.cloud\/the-fallacy-of-the-24x7-soc\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/ptp.cloud\/the-fallacy-of-the-24x7-soc\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/ptp.cloud\/the-fallacy-of-the-24x7-soc\/#primaryimage\",\"url\":\"https:\/\/ptp.cloud\/wp-content\/uploads\/2020\/09\/24x7SEC-post-feature.jpg\",\"contentUrl\":\"https:\/\/ptp.cloud\/wp-content\/uploads\/2020\/09\/24x7SEC-post-feature.jpg\",\"width\":400,\"height\":250,\"caption\":\"Gary Derheim, VP of Managed Services & Marketing at PTP, explains why the traditional 24\u00d77 SOC might not be the best approach for mid-sized companies.\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/ptp.cloud\/the-fallacy-of-the-24x7-soc\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/ptp.cloud\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"The Fallacy of the 24×7 SOC\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/ptp.cloud\/#website\",\"url\":\"https:\/\/ptp.cloud\/\",\"name\":\"PTP | Cloud Experts | Biotech Enablers\",\"description\":\"Helping innovative life sciences companies to get treatments to market faster.\",\"publisher\":{\"@id\":\"https:\/\/ptp.cloud\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/ptp.cloud\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/ptp.cloud\/#organization\",\"name\":\"Pinnacle Technology Partners\",\"alternateName\":\"PTP\",\"url\":\"https:\/\/ptp.cloud\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/ptp.cloud\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/ptp.cloud\/wp-content\/uploads\/2021\/08\/ptp_logo.png\",\"contentUrl\":\"https:\/\/ptp.cloud\/wp-content\/uploads\/2021\/08\/ptp_logo.png\",\"width\":409,\"height\":181,\"caption\":\"Pinnacle Technology Partners\"},\"image\":{\"@id\":\"https:\/\/ptp.cloud\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/www.facebook.com\/PTPCloud\",\"https:\/\/x.com\/PTPCloud\",\"https:\/\/www.linkedin.com\/company\/pinnacletechpartners\",\"https:\/\/www.youtube.com\/@ptp4766\"]},{\"@type\":\"Person\",\"@id\":\"https:\/\/ptp.cloud\/#\/schema\/person\/23219285c14844480b63688ae98ff7c5\",\"name\":\"PTPstaff\",\"sameAs\":[\"https:\/\/ptpcloud.mystagingwebsite.com\/ptp\"]}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"The Fallacy of the 24x7 SOC | PTP News","description":"The security industry has trained customers to ask for and talk about the 24\u00d77 Security Operations Center (SOC).","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/ptp.cloud\/the-fallacy-of-the-24x7-soc\/","og_locale":"en_US","og_type":"article","og_title":"The Fallacy of the 24x7 SOC | PTP News","og_description":"The security industry has trained customers to ask for and talk about the 24\u00d77 Security Operations Center (SOC).","og_url":"https:\/\/ptp.cloud\/the-fallacy-of-the-24x7-soc\/","og_site_name":"PTP | Cloud Experts | Biotech Enablers","article_publisher":"https:\/\/www.facebook.com\/PTPCloud","article_published_time":"2020-09-02T15:42:03+00:00","article_modified_time":"2024-04-26T07:23:07+00:00","og_image":[{"width":400,"height":250,"url":"https:\/\/ptp.cloud\/wp-content\/uploads\/2020\/09\/24x7SEC-post-feature.jpg","type":"image\/jpeg"}],"author":"PTPstaff","twitter_card":"summary_large_image","twitter_creator":"@PTPCloud","twitter_site":"@PTPCloud","twitter_misc":{"Written by":"PTPstaff","Est. reading time":"1 minute"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/ptp.cloud\/the-fallacy-of-the-24x7-soc\/#article","isPartOf":{"@id":"https:\/\/ptp.cloud\/the-fallacy-of-the-24x7-soc\/"},"author":{"name":"PTPstaff","@id":"https:\/\/ptp.cloud\/#\/schema\/person\/23219285c14844480b63688ae98ff7c5"},"headline":"The Fallacy of the 24×7 SOC","datePublished":"2020-09-02T15:42:03+00:00","dateModified":"2024-04-26T07:23:07+00:00","mainEntityOfPage":{"@id":"https:\/\/ptp.cloud\/the-fallacy-of-the-24x7-soc\/"},"wordCount":831,"commentCount":0,"publisher":{"@id":"https:\/\/ptp.cloud\/#organization"},"image":{"@id":"https:\/\/ptp.cloud\/the-fallacy-of-the-24x7-soc\/#primaryimage"},"thumbnailUrl":"https:\/\/ptp.cloud\/wp-content\/uploads\/2020\/09\/24x7SEC-post-feature.jpg","articleSection":["Learning Videos","SecOps"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/ptp.cloud\/the-fallacy-of-the-24x7-soc\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/ptp.cloud\/the-fallacy-of-the-24x7-soc\/","url":"https:\/\/ptp.cloud\/the-fallacy-of-the-24x7-soc\/","name":"The Fallacy of the 24x7 SOC | PTP News","isPartOf":{"@id":"https:\/\/ptp.cloud\/#website"},"primaryImageOfPage":{"@id":"https:\/\/ptp.cloud\/the-fallacy-of-the-24x7-soc\/#primaryimage"},"image":{"@id":"https:\/\/ptp.cloud\/the-fallacy-of-the-24x7-soc\/#primaryimage"},"thumbnailUrl":"https:\/\/ptp.cloud\/wp-content\/uploads\/2020\/09\/24x7SEC-post-feature.jpg","datePublished":"2020-09-02T15:42:03+00:00","dateModified":"2024-04-26T07:23:07+00:00","description":"The security industry has trained customers to ask for and talk about the 24\u00d77 Security Operations Center (SOC).","breadcrumb":{"@id":"https:\/\/ptp.cloud\/the-fallacy-of-the-24x7-soc\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/ptp.cloud\/the-fallacy-of-the-24x7-soc\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/ptp.cloud\/the-fallacy-of-the-24x7-soc\/#primaryimage","url":"https:\/\/ptp.cloud\/wp-content\/uploads\/2020\/09\/24x7SEC-post-feature.jpg","contentUrl":"https:\/\/ptp.cloud\/wp-content\/uploads\/2020\/09\/24x7SEC-post-feature.jpg","width":400,"height":250,"caption":"Gary Derheim, VP of Managed Services & Marketing at PTP, explains why the traditional 24\u00d77 SOC might not be the best approach for mid-sized companies."},{"@type":"BreadcrumbList","@id":"https:\/\/ptp.cloud\/the-fallacy-of-the-24x7-soc\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/ptp.cloud\/"},{"@type":"ListItem","position":2,"name":"The Fallacy of the 24×7 SOC"}]},{"@type":"WebSite","@id":"https:\/\/ptp.cloud\/#website","url":"https:\/\/ptp.cloud\/","name":"PTP | Cloud Experts | Biotech Enablers","description":"Helping innovative life sciences companies to get treatments to market faster.","publisher":{"@id":"https:\/\/ptp.cloud\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/ptp.cloud\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/ptp.cloud\/#organization","name":"Pinnacle Technology Partners","alternateName":"PTP","url":"https:\/\/ptp.cloud\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/ptp.cloud\/#\/schema\/logo\/image\/","url":"https:\/\/ptp.cloud\/wp-content\/uploads\/2021\/08\/ptp_logo.png","contentUrl":"https:\/\/ptp.cloud\/wp-content\/uploads\/2021\/08\/ptp_logo.png","width":409,"height":181,"caption":"Pinnacle Technology Partners"},"image":{"@id":"https:\/\/ptp.cloud\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/PTPCloud","https:\/\/x.com\/PTPCloud","https:\/\/www.linkedin.com\/company\/pinnacletechpartners","https:\/\/www.youtube.com\/@ptp4766"]},{"@type":"Person","@id":"https:\/\/ptp.cloud\/#\/schema\/person\/23219285c14844480b63688ae98ff7c5","name":"PTPstaff","sameAs":["https:\/\/ptpcloud.mystagingwebsite.com\/ptp"]}]}},"jetpack_featured_media_url":"https:\/\/ptp.cloud\/wp-content\/uploads\/2020\/09\/24x7SEC-post-feature.jpg","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/ptp.cloud\/wp-json\/wp\/v2\/posts\/450","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/ptp.cloud\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/ptp.cloud\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/ptp.cloud\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/ptp.cloud\/wp-json\/wp\/v2\/comments?post=450"}],"version-history":[{"count":0,"href":"https:\/\/ptp.cloud\/wp-json\/wp\/v2\/posts\/450\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/ptp.cloud\/wp-json\/wp\/v2\/media\/492"}],"wp:attachment":[{"href":"https:\/\/ptp.cloud\/wp-json\/wp\/v2\/media?parent=450"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/ptp.cloud\/wp-json\/wp\/v2\/categories?post=450"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/ptp.cloud\/wp-json\/wp\/v2\/tags?post=450"},{"taxonomy":"table_tags","embeddable":true,"href":"https:\/\/ptp.cloud\/wp-json\/wp\/v2\/table_tags?post=450"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}