Security Operations Center
(ศูนย์ปฏิบัติการความปลอดภัย)
Definition
Security Operations Center (ศูนย์ปฏิบัติการความปลอดภัย) Soft Skill
A centralized team responsible for monitoring, detecting, and responding to cybersecurity threats and incidents to protect an organization's information systems.
Expertise Level
Level 1
Basic
1. Understands basic functions of a Security Operations Center (SOC).
2. Can monitor security alerts and escalate simple incidents.
3. Familiar with common cybersecurity threats and terminology.
Level 2
Intermediate
1. Able to analyze and investigate security incidents using SOC tools.
2. Can coordinate response activities with relevant teams.
3. Understands network traffic and common attack vectors.
Level 3
Advanced
1. Leads complex threat hunting and incident response processes.
2. Develops and improves SOC procedures and playbooks.
3. Proactively identifies emerging threats and implements strategic defenses.
