The National Critical Information Infrastructure Protection Centre (NCIIPC) assesses the cyber resilience of Critical Sector Entities (CSEs). As part of these assessments, NCIIPC performs manual reviews of samples of security alerts and case-management records generated by Security Operations Centres (SOCs). These reviews have consistently produced valuable supervisory findings that were not evident through policies, audits, self-assessments, management reports, KPI dashboards, or compliance doc
NCIIPC seeks a deployable Supervisory Analytics Tool for SOC Assessment (SAT-SA) that assists supervisors in analysing SOC alert and case-management data at scale.The tool should help supervisors: (i).
As part of these assessments, NCIIPC performs manual reviews of samples of security alerts and case-management records generated by Security Operations Centres (SOCs) These reviews have consistently produced valuable supervisory findings that were not evident through policies, audits, self-assessments, management reports, KPI dashboards, or compliance doc
NCIIPC seeks a deployable Supervisory Analytics Tool for SOC Assessment (SAT-SA) that assists supervisors in analysing SOC alert and case-management data at scale.The tool should help supervisors: (i). Identify entities requiring supervisory attention. (ii).Prioritise alert samples and investigations for manual review. (iii).Detect operational weaknesses and cyber resilience concerns. (iv).Improve the efficiency, consistency and scalability of supervisory assessments. The tool is intended to support human examiners and supervisory decision-making. It is not intended to replace supervisory judgement. 1. Out of Scope The proposed solution is not intended to: (i). Function or replace as a Security Operations Centre (SOC) of CSEs. (ii).Perform real-time monitoring. (iii).Act as a SIEM system