Resources · Blog · Tag

SOC operations

Running a security operations centre — staffing, tooling, maturity and automation.

Tagged “SOC operations”

Blog15 Jul 2026

What Is a Managed SOC? Services, Benefits, and How to Choose

Running security around the clock is harder than most organisations expect. Threats don’t keep office hours, alerts pile up by the thousand, and the skilled people needed to make sense of it all are scarce and expensive. A Managed SOC is how many organisations solve that problem without buildi

Marsha Widagdo

Blog17 Jun 2026

Cyber War Room: What Really Happens When Hackers Attack

Most people picture a breach as a single dramatic moment. Alarms, red screens, an attacker punching through the firewall in one loud burst. That image makes for good television. It is almost never how an attack actually unfolds. In reality, an attack is a sequence of small, ordinary-looking signals.

Zentara Team

Blog13 Apr 2026

SOC Automation Done Right: Where Automation Helps and Where It Breaks

Security Operations Centres (SOCs) are under constant pressure. Alert volumes continue to grow, environments become more complex, and threats move faster than ever. SOC automation is often positioned as the solution. But automation alone is not the answer. When implemented poorly, it can create new

Marsha Widagdo

Blog26 Mar 2026

The SOC Maturity Model: How Security Operations Evolve from Monitoring to Defense

In many organisations, the Security Operations Centre (SOC) begins as a visibility function. Logs are collected, alerts are generated, and dashboards provide a sense of control over an increasingly complex environment. On paper, this looks like progress. In reality, visibility alone does not stop at

Marsha Widagdo

AI in Cybersecurity20 Feb 2026

A Technical Guide to Choosing SIEM: When Classic SIEM Is Enough, and When Agentic SOC Is Needed

SOC in Southeast Asia in Critical Condition SOC (Security Operations System) teams in Southeast Asia are currently in a critical state and experiencing extraordinary pressure. Based on a report recorded by Indonesia’s BSSN (National Cyber and Crypto Agency), there were 3.64 billion cyberattacks or a

Alisha

Blog03 Feb 2026

XDR vs SIEM vs SOAR: What Each One Does and Where Teams Misuse Them

Security teams are not short on tools. They are short on clarity. SIEM, SOAR, and XDR are often discussed as interchangeable or as successive “upgrades” to one another. In reality, they solve different problems, operate at different layers, and fail for different reasons when misused. Understanding

Darian Kuswanto

Blog30 Jan 2026

Fintech Security in SEA: A Practical Security Baseline for Growth-Stage Teams

Security operations teams are under pressure from both sides. On one hand, threats are increasing in volume and sophistication. On the other, hiring experienced security talent is expensive, slow, and increasingly competitive. CISOs are left with a recurring question that has no simple answer. When

Surya Maulana

Blog28 Jan 2026

When to Hire, When to Automate: A Staffing Model for Modern Security Operations

Marsha Widagdo

AI in Cybersecurity02 Jan 2026

How to Build a Security Operations Center That Actually Prevents Breaches

Breaches don’t occur because organisations lack security products. They happen because defenders fail to detect and respond before attackers move. A Security Operations Centre (SOC) should prevent that. But too many SOCs end up as log-collectors, alert generators, or compliance checkboxes, not as re

Surya Maulana

Cloud & IT Security29 Nov 2025

SOC Burnout is Real: Strategies to Protect Your Blue Team

Security Operations Centers sit at the front line of an enterprise’s defensive posture, but the operational cost on the humans behind the console is often underestimated. Across Southeast Asia and globally, blue teams report sustained alert pressure, expanding attack surfaces, understaffing, a

Jet

Vulnerability Assessment and Penetration Testing (VAPT)

Blog28 Oct 2025

How AI-Native SOCs are Transforming Threat Detection and Cyber Resilience

Modern enterprises no longer face predictable or isolated cyber threats. Today’s attackers operate with automation, artificial intelligence, and stealth, leveraging techniques that evolve in real time. Traditional Security Operations Centers (SOCs), even when equipped with sophisticated SIEM or SOAR

Surya Maulana

SOCaaS, SOC as a Service, Security Operations Center

Blog15 Oct 2025

Managed SOC vs SOC as a Service: The Technical Divide That Defines Modern Cyber Defense

Cybersecurity today demands more than basic threat detection. It requires persistent visibility, intelligence-driven defense, and the ability to respond to threats at machine speed. Two models dominate enterprise security operations: Managed Security Operations Center (Managed SOC) and Security Oper

Marsha Widagdo