Gartner names Integrated Security Operations Center as a tool category
Original title: What exactly is ISOC? And what does it mean for you?
Stellar Cyber argues ISOC should own telemetry, cases, and response as SIEM remains the system of record.
Help Net Security relays Stellar Cyber’s account of a Gartner category called the Integrated Security Operations Center, or ISOC. The piece says SIEM stays the system of record for collecting and searching events, while ISOC is meant to unify detection, investigation, case management, and response. It lists native detection, incident objects, cross-domain correlation, automation, and open ingestion as expected features, and positions Stellar Cyber’s platform as collecting, correlating, and responding from one architecture. No product defect, incident, or independent evaluation result is reported.
- The article says ISOC market share may expand into identity, cloud and SaaS, and email security.
- Stellar Cyber says an AI SOC that starts from another vendor’s alert is already too late.
- Vendors
- Stellar Cyber
- Organizations
- Gartner
From the original article
4 min read at helpnetsecurity.com
Gartner recently released a new category of assessing security tools: the Integrated Security Operations Center (ISOC). Even though SIEM isn’t going anywhere, a rapidly evolving threat landscape is forcing a shift in industry logic that is reflected in the emergence of this new category. For years, SIEM has dominated as an all-encompassing category.
helpnetsecurity.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.