“Build a SOC or Choose an MSSP?”, by Eric Carroll

The decision to build an internal Security Operations Center (SOC) versus selecting a Managed Security Service Provider (MSSP) to handle operational information security concerns can be a difficult and time consuming task for organizations seeking to improve their security posture. This post will explore advantages and disadvantages of both options and provide context around my personal experience with helping build a SOC and select an MSSP. What other factors come into the decision of chosing an MSSP or building your own SOC?