(
)
SIEM - Gather Event Data
SIEM - Normalise data
Security Operations Centre - Protective Monitoring - SIEM Processes - DRAFT
Security Operations Center Architecture (SoC) - DRAFT in progress