Cybersecurity glossary
What is SOC?
Also known as: SOC, security operations center
Definition
A security operations center (SOC) is the team, in-house or outsourced, that monitors systems for threats, triages alerts and leads the technical response to incidents.
Why it matters
SOC analysts work with SIEM, EDR and threat intelligence. Automation and AI agents increasingly handle enrichment and routine triage, with analysts approving consequential actions.
Common questions about SOC
See also
Sources
Related Guides
GuideSmall Business Security
How to Write an Incident Response Plan Small Business Owners Use
Learn how to write an incident response plan small business teams can execute quickly. Protect operations, contain threats, and recover critical systems.
Read more GuideGRC
8 Essential Small Business Security Policies to Protect Operations
Establish baseline defense with 8 essential small business security policies covering backups, access control, patching, incident response, and AI use.
Read more