SOC maturity assessment: is your SOC detecting what matters?
Many organisations pay for a SOC without knowing what it actually detects. IRM-Advisors reviews your Security Operations Centre, in-house or outsourced, and shows where coverage, processes or service levels fall short.
- Effort
- Typically 15 to 30 consulting days
- Pricing
- Fixed price, quoted after a 30-minute scoping call.
Who it is for
- Organisations with a managed SOC or MDR service that want an independent check
- Firms running an in-house SOC that want to plan its next stage
- Boards and risk committees that need evidence the SOC is effective
- Firms preparing to renew or replace their SOC provider
What you receive
- A maturity rating across business, people, process, technology and service domains
- Detection coverage mapped to the MITRE ATT&CK techniques relevant to your sector
- A review of use cases, playbooks, escalation and incident handover
- An assessment of SLAs, reporting and contract performance
- A prioritised improvement plan, or the input for a SOC RFP
How it works
- ContextUnderstand your threat profile, critical assets and current SOC model.
- AssessmentInterviews, document review and analysis of alerts, use cases and reports.
- Coverage analysisMap detections against MITRE ATT&CK and your priority threats.
- RecommendationsA report with maturity scores, gaps and a clear decision: improve, renegotiate or retender.
Relevant credentials
Selected engagements
- Asset managerMaturity assessment of an outsourced SOC.
Frequently asked questions
What is a SOC maturity assessment?
It measures how well a Security Operations Centre detects, investigates and responds to threats. It covers people, processes, technology and governance, using recognised models such as SOC-CMM.
Can you assess an outsourced SOC?
Yes. The assessment uses your contract, reports and alert data, and interviews with the provider where possible.
Are you independent from SOC vendors?
Yes. IRM-Advisors does not resell SOC services or security products and takes no referral fees from vendors.
Discuss your situation in a 30-minute call. No preparation needed.
Book a call