Kaspersky’s recent research indicates that most companies prefer outsourcing certain Security Operations Center (SOC) functions, while many also adopt the SOC-as-a-Service (SOCaaS) model. This strategic approach allows companies to ensure round-the-clock protection, maintain regulatory compliance, and leverage advanced cybersecurity solutions and specialized expertise beyond internal capabilities.
Global Survey Insights
Kaspersky conducted a global survey to explore the main drivers, strategic objectives, and potential challenges in planning and operating SOCs. Key findings in Egypt include:
-
42% of companies plan to outsource some SOC functions, combining internal capabilities with external expertise.
-
50% are willing to fully implement the SOCaaS model.
-
Only 8% plan to build an in-house SOC, highlighting the challenges of continuous monitoring, protection, and recruiting specialized personnel.
Outsourced SOC Services
Outsourcing SOC management allows organizations to delegate specific tasks or the full operational cycle to a trusted external provider. Services typically include:
-
Designing and structuring the SOC.
-
Deploying and implementing SOC technologies.
-
Monitoring and analysis by external security analysts.
-
Consulting and training services.
-
Providing end-to-end SOCaaS, including detection, investigation, and response.
Most Outsourced Tasks
While most companies retain strategic functions internally, they outsource operationally complex tasks:
-
Solution deployment and implementation: 50%
-
Solution development and provisioning: 43%
-
SOC design: 45%
First-line analysts (63%) and second-line analysts (69%) are the most requested external experts, reflecting a focus on threat monitoring and response.
Why Companies Choose Outsourcing
The primary reasons include:
-
Continuous protection: 54%
-
Reducing workload on internal security teams: 60%
-
Access to advanced tools and technologies: 36%
-
External support to ensure regulatory compliance: 41%
-
Cost efficiency is less critical, with only 37% citing it as a main factor.
Kaspersky Leadership Commentary
Sergey Soldatov, Head of Kaspersky SOC, commented: “The shift toward outsourcing SOC functions enhances operational focus and strategic flexibility. Delegating routine and technical tasks externally allows organizations to concentrate on strategic decision-making and complex threat response, often generating significant cost savings while transforming the SOC into a critical strategic asset.”
Kaspersky Recommendations for Companies
Kaspersky advises organizations planning or improving a SOC to:
-
Use Kaspersky’s SOC consulting services during initial setup or for improving existing operations.
-
Enhance security performance with Kaspersky’s advanced AI-powered SOC platform, which aggregates and analyzes infrastructure logs, providing actionable threat intelligence.
-
Protect the organization with Kaspersky Next solutions, offering continuous threat detection and endpoint response capabilities.
-
Equip security teams with comprehensive threat visibility using Kaspersky Threat Intelligence, enabling timely identification and mitigation of cyber risks.
