Gartner Blog Network


The “How To Build a SOC” Paper Update is OUT!

by Augusto Barros  |  September 7, 2018  |  1 Comment

Anton and I have been probing the social media for some time about the trends related to SOC and incident response teams. All that work finally made its way into our “How to Plan, Design, Operate and Evolve a SOC” paper. It is the same paper we published a couple of years ago, but updated to reflect some things we’ve seen evolving since the first version, such as:

  • SOAR tools evolution and growth in adoption
  • Further convergence between security monitoring and incident response
  • Higher adoption of services to supplement internal capabilities

We also updated the guidance figure to include more details for each phase:

Please provide feedback if you read it via https://surveys.gartner.com/s/gtppaperfeedback

Category: incident-response  siem-and-log-management  threat-detection  

Tags: incident-response  new-research  research  soc  

Augusto Barros
Research VP
3 years at Gartner
21 years IT Industry

Augusto Barros is Research Director in the Gartner for Technical Professionals (GTP) Security and Risk Management group. Read Full Bio


Thoughts on The “How To Build a SOC” Paper Update is OUT!


  1. […] Augusto already announced awhile ago, we have updated our “how to SOC” paper for 2018. His post even includes our main […]



Leave a Reply

Your email address will not be published. Required fields are marked *

Comments or opinions expressed on this blog are those of the individual contributors only, and do not necessarily represent the views of Gartner, Inc. or its management. Readers may copy and redistribute blog postings on other blogs, or otherwise for private, non-commercial or journalistic purposes, with attribution to Gartner. This content may not be used for any other purposes in any other formats or media. The content on this blog is provided on an "as-is" basis. Gartner shall not be liable for any damages whatsoever arising out of the content or use of this blog.