SOC and NOC

Context and approach

Monitoring a network's security and monitoring its availability are two different disciplines, requiring different tools, processes, and engineering profiles — but they work best when coordinated under a single provider.

That's why Netmask operates two complementary centers: the SOC (Security Operations Center), focused on threat detection and response, and the NOC (Network Operations Center), focused on infrastructure availability and performance. Both operate under ITIL methodology, with specific training in ISA/IEC 62443 standards for industrial environments.

What's included in this service?

• SOC — Asset management — identification and tracking of industrial assets.
• SOC — Continuous monitoring — SIEM and IDS platforms.
• SOC — Threat intelligence — specific to industrial control systems (ICS).
• SOC — Detection, mitigation, and response — real-time incident handling, with ISA/IEC 62443 training.
• NOC — 24x7 monitoring — physical/virtual servers, switches, and firewalls.
• NOC — Industrial protocol supervision — Modbus, MQTT, OPC UA.
• NOC — Dashboards and reports — automatic, by area or industrial site, under ITIL methodology.
• 24/7 Help Desk — available as an add-on, with escalation matrix to Level 2 and 3 engineers.