Half of large global companies plan to build Security Operations Centres (SOCs) to strengthen cybersecurity, with human expertise remaining critical despite rising automation, according to a new study by Kaspersky.
The survey of senior IT security leaders across 16 countries found 50 per cent aim to establish SOCs to improve security posture, while 45 per cent cited increasingly sophisticated cyber threats. Faster detection and response, budget optimisation, data protection, regulatory compliance and competitive advantage were also key drivers.
Round-the-clock security monitoring tops planned SOC functions at 54 per cent. While organisations increasingly deploy tools such as threat intelligence platforms, endpoint detection and SIEM systems, skilled analysts remain central to interpreting data and directing responses.
"To build an effective SOC, organisations must balance technology with clear processes and human decision-making," said Roman Nazarov, stressing that well-designed workflows enable analysts to focus
on critical threats.