SOC

The team and facility that monitors and defends against threats continuously.

A security operations center is the team and facility responsible for continuous monitoring, detection, triage, and response to security events across an organization. It typically combines analysts working in tiers with tooling such as SIEM, SOAR, and threat intelligence feeds. Metrics like mean time to detect and mean time to respond gauge its effectiveness. Note the unrelated meaning of SOC in compliance, the System and Organization Controls audit reports, and distinguish the center from the lowercase SoC hardware term.