Go to Content

Security Operations Center (SOC)

.PT is implementing a Security Operations Center (SOC) to accelerate the response to cyber security incidents and threats.

The work of the Security Operations Center is based on the prevention and the ability to detect risks and threats, as well as reducing the duration and impact of security incidents that exploit, deny, degrade or disrupt the systems required for the normal business operations.

The implementation of this project involves the adoption of a Security Information and Event Management (SIEM) solution as a key technological component that allows not only collecting, classifying and evaluating events from existing data sources on the network, but also perform correlation and prioritization of relevant information.

The Security Operations Center will provide the .PT with the means needed to operationalize, properly and effectively, the requirements arising from the Network and Information Security (NIS) Directive, the first EU-level cybersecurity legislation which sets measures to prevent cybersecurity incidents in Europe. Under this law, .PT was considered one of the essential service providers in the digital infrastructure sector at a national level.

PTSOC 2020 Annual Report available here