Do any of you fine people have any experience creating a SOC from scratch. Deciding on a security framework, creating and Implanting policy, hardening of servers etc. If so how did you approach it how did you get buy in.
I am just wondering how people have approached it. Would you take on the responsibility again?
Thank you.
Split the team into specialities – is the a security function from scratch or is there a security team already looking to build out a SOC?