SOC Team Roles and Responsibilities SCE Practice Questions (Page 9)

Questions 41–41

1. 41expert · hard

   A SOC is being established in a large organization. The SOC manager is defining the team structure and needs to ensure that there is clear accountability for incident response. The organization has a flat IT structure with no dedicated security team. What is the most important consideration when defining the SOC team structure?

   • AHave the SOC manager personally handle all incident response activities.
   • BEnsure that all analysts have equal authority to make decisions.
   • CHire as many analysts as possible to ensure coverage.
   • DEstablish clear roles and escalation paths, including a designated incident commander for major incidents.
   Reveal Solution Discussion Select an answer first