And operators have to train personnel themselves

[tanjimajuha20]

However, as Positive Technologies information security architect Mikhail Kader noted, the personnel problem is global and long-standing: it has been talked about for all 25 years that he has been working in the information security market. According to the Devo SOC Performance Report, on average, it took seven months to find a SOC analyst in the world this year. In Russia, according to the host of the blog "Business without danger" Alexey Lukatsky, the situation is about the same.

. At the same time, as noted by costa rica cell phone number list the head of the Solar JSOC expert pre-sales group "RTK-Solar" Artem Kildyushev, the real statistics are that out of 400 people who were attracted to the internship at Solar JSOC, only about 40 made it to the interview. According to Evgeny Lyapushkin, retraining IT specialists of a similar profile gives good results.

According to Alexey Vorontsov, an equally serious factor of inhibition is that in a crisis situation many potential customers prefer to refuse any outsourcing, since the transfer of such a sensitive area as IT and information security to a third-party company that can close at any moment is an additional risk factor. Moreover, this is a global practice. Although it should be borne in mind that building your own SOC requires a long time (at least a year) and at least 30 people. However, Kirill Ilyin gave an example when a relatively small company built a full-fledged SOC in a fairly short time using freely distributed systems. Although, in his opinion, such cases will still remain isolated.

According to Mikhail Kader, on the contrary, during a crisis, companies tend to outsource non-core areas, thereby reducing their costs. In addition, it is more difficult for companies outside the IT and IS sphere to attract and retain scarce personnel in the required quantity.

Also, among the obstacles that hinder the development of the SOC market, they name the insufficient maturity of customers. As Artem Kildyushev noted, many projects end already at the stage of defining areas of responsibility. Also, many have to prove that it is simply impossible to do everything for the customer. And in general, as Artem Sychev complained, many of the potential customers make simply impossible demands on operators. This happens especially often when agreeing on work deadlines.

Participants in the discussion also pointed out the shortage of equipment as one of the reasons hindering the development of the SOC market. However, in terms of significance, it is significantly inferior to the others.