Continuous improvement on maturity and capability of Security Operation Centres


ACARTÜRK C., ULUBAY M., Erdur E.

IET INFORMATION SECURITY, vol.15, no.1, pp.59-75, 2021 (SCI-Expanded) identifier identifier

  • Publication Type: Article / Article
  • Volume: 15 Issue: 1
  • Publication Date: 2021
  • Doi Number: 10.1049/ise2.12005
  • Journal Name: IET INFORMATION SECURITY
  • Journal Indexes: Science Citation Index Expanded (SCI-EXPANDED), Scopus, PASCAL, Aerospace Database, Applied Science & Technology Source, Communication Abstracts, Compendex, Computer & Applied Sciences, INSPEC, Metadex, Civil Engineering Abstracts
  • Page Numbers: pp.59-75
  • Middle East Technical University Affiliated: Yes

Abstract

This study addresses maturity and capability assessment of Security Operation Centres (SOC). It aims to contribute to continuous improvement for SOCs by proposing a complementary methodology that provides SOCs a self-assessment capability. The method basically involves an assessment of the gaps between the current and the desired states of the organization and facilitates determining critical aspects that have priority. The proposed methodology is based on the define, measure, analyze, improve, and control methodology of the Six Sigma approach and offers a service-oriented improvement process for SOCs. The applicability of the methodology is demonstrated by a case study. We evaluated subject matter experts' reviews using simplified conversation analysis as a qualitative, content-analysis approach.