Evolution of a SOC/CERT operation

Explore the transformative journey of an international energy supply company's CERT/SOC operation model in this presentation. From the initial stages of unstructured data collection for an externally managed "BlackBox" detection solution to the integration of AI-supported, highly specialized internal teams, delve into the evolution of cybersecurity practices. Through collaboration with various Managed Security Service Providers (MSSPs) and the adoption of new operational models and AI-based tools, witness how each iteration drives forward the company's cyber defense maturity. Discover how this journey showcases continuous improvement in internal processes and reinforces the importance of adaptive cybersecurity strategies.