About this event
Who is watching your environment at 03:00?
Do you know what your SOC should detect, and what happens when it does?
Should you run your own Elastic with a partner on top, or hand the whole SOC to someone else?
Every organisation has something worth taking: customer data, payments, production, and the reputation that goes with them. Most now have a SIEM and some form of monitoring. Far fewer can say with confidence what their SOC is designed to catch, who responds, how fast, and what that design costs. Without that clarity, the platform decision, the staffing decision and the outsourcing decision are made in the wrong order.
On 26 November NEVERHACK and Elastic bring together the three parties that make a SOC work: the platform vendor, the SOC operator and the customer. In one hour we walk through how a security operations centre on Elastic is designed, operated and lived with, using real examples rather than slides.
Start with the operating model
Pavel Laptev, SOC Strategy and Transformation Lead at NEVERHACK, explains why a successful Elastic SOC begins with clear monitoring and response goals, so that the platform is configured around the operation it serves, and what goes wrong when that step is skipped. He walks through how NEVERHACK operates SOCs across its territories, the service levels a customer can choose, and the ways to run it.
What the platform makes possible
Renee Jacobs, Principal Partner Solution Architect at Elastic, shows what Elastic Security gives a modern SOC: an open data model, flexibility for the most demanding environments, a pricing model built for managed services, and the AI and automation an analyst actually uses. She also explains where the platform ends and the integrator begins.
The view from a bank
Mykola Serpuchenko of Luminor Bank describes how a bank supervised directly by the European Central Bank approaches security operations: what it keeps in-house, what it hands to a partner, and how the relationship works day to day.
After the webinar you will know:
Hosted by Louis Zezeran, Technical Sales Engineer at NEVERHACK Estonia
Who should watch? CISOs, heads of security and security operations leads at organisations running or considering a SOC
When: Thursday 26 November, 15:00–16:00 EET (14:00–15:00 CET)
Language: English
With 40+ years of experience, NEVERHACK is a global leader in risk management, compliance, data protection, integrated security, training, and vulnerability assessment, with 1,200+ experts across 10 countries.