Security Operations Center (SOC)
Active Ambassadors in This Topic
Community Posts
Who owns Communication in Network vs. Security Incidents? Best Practices & RACI Guidance Needed In many organizations, Network and Security teams both play a role in incident response, especially when firewall or SASE issues impact network performance. When an issue is first diagnosed by the Network team but determined to be security-related, who should own the ongoing communication, resolution updates, and root cause reporting? I’d love to hear from the community: • Are there best practices, ITIL/ITSM frameworks, or RACI models that clarify ownership? • How does your organization handle communication handoffs between Network and Security teams?
Cost28%
Repeat Issues42%
Response Time22%
Customer Service6%
CISSP32%
CISM34%
CEH9%
Security+11%
SSCP2%
Other10%
Would you support the convergence of Security Operations Center (SOC) and Network Operations Center (NOC) functions to:
1) Drive operational efficiency
2) Reduce costs through automation, and;
3) Align tools and processes under a unified, standardized platform offering a single-pane-of-glass view of security and network telemetry?
Yes79%
No11%
Maybe11%