Microsoft CAF Security Operations

Overview of the Security Operations (SecOps/SOC) discipline in the Secure Methodology of the Cloud Adoption Framework (CAF) with John Dellinger and Mark Simos. This rich discussion focuses on real world lessons learned for a security operations program including key cultural elements, critically important success metrics, and points of integration with business processes. Mark and John also discuss a reference team model built around 'jobs to be done' in security operations-- handling high volume vs. high complexity incidents, coordinating incident response with organizational stakeholders, and sharing threat intelligence insights to inform decision makers within security, IT, and business leadership.