Parabellum: 2019 SANS SOC Survey Recap, Overcoming SOC Staffing Challenges

 

The 2019 SAN SOC Survey recap webinar, conducted in July of 2019, was hosted by Oren Aspir, CTO of Cyberbit, and Yarden Altman, Cyberbit incident response expert and former SOC manager. The Webinar covered the key survey findings, changes from 2018 to 2019, how to overcome the skill shortage, and the role of SOAR in SOC optimization,.

The objective of the SANS SOC Survey was to provide an overview from over 350 SOC leaders on the role, performance, technologies and processes applied in SOCs, and to offer guidance to build, maintain, and mature effective SOCs.

Key SOC Statistics included: 50% of SOCs have 2 – 10 FTEs, 10% say they have all their smart systems covered by the SOC, 11% of SOCs automate their performance metrics, and 94% of organizations keep IR as an internal function, in most of them (77%) IR is part of the SOC

“The main two barriers we had last year are the same…Lack of skilled staff and lack of automation and orchestration,” Aspir said.

Aspir discussed the issues surrounding effective training of staff, and Altman explained the 6 key elements for a successful SOAR implementation. Altman then introduced SOC 3D and shared some KPI lifts from customers who implemented SOC 3D.

“We have seen a 90% reduction in response time to incidents, which translates to more incidents per shift, or less people per shift,” Altman said.

For the latest news, videos, and podcasts in the Software & Electronics Industry, be sure to subscribe to our industry publication.

Follow us on social media for the latest updates in B2B!
Twitter – @TechMKSL
Facebook – facebook.com/marketscale
LinkedIn – linkedin.com/company/marketscale

Follow us on social media for the latest updates in B2B!

Image

Latest

asset visibility
Diagnosing Your Capital Asset Health: Why Asset Visibility Is the New Financial Imperative in Healthcare
February 25, 2026

Hospitals and surgery centers own millions of dollars in equipment — but owning assets and having actionable visibility into them are two different things. Most systems maintain inventories, yet many struggle with outdated records, fragmented tracking, and limited insight into useful life or service contracts. With nearly half of U.S. hospitals reporting negative operating…

Read More
CFO
From Public Accounting to CFO: The Leadership Wake-Up Call
February 25, 2026

The CFO seat is being rewritten in real time. Today’s finance leaders are expected to drive growth, lead enterprise-wide systems transformations, and shape AI strategy—while still keeping the close, controls, and capital story airtight. Gartner reports that 59% of finance leaders are already using AI in the finance function, underscoring how rapidly the role is…

Read More
restorative practices
Building Safer Schools Through Restorative Practices
February 24, 2026

School Safety Today podcast, presented by Raptor Technologies. In this episode of Principals of Change, host Dr. Amy Grosso sits down with D’Jon Pitchford, Assistant Principal at Kelly Lane Middle School in Pflugerville ISD, to explore what school safety really means. Pitchford reframes safety as more than physical security—emphasizing trust, restorative practices, campus culture,…

Read More
continuous improvement in education
Continuous Improvement in Education: If You Want Different Outcomes, Change the System
February 24, 2026

School systems across the country are under mounting pressure to improve student outcomes while navigating shifting standards, staffing shortages, and rising expectations around accountability. Yet many reform efforts fall short because they are fragmented and short-term. According to Learning Forward’s Standards for Professional Learning, sustained and job-embedded professional learning is linked to improved educator…

Read More