Building a 24x7 operations center takes scarce people, tooling and years of tuning. A managed SOC gives you the monitoring, triage and escalation from day one, at a cost you can plan.
We define what must be watched, what counts as an incident and who is called, then run the service against those rules and report on it in terms your board and your regulator expect.
Why it matters
Round-the-clock monitoring and triage of alerts
Use cases mapped to SAMA CSF and NCA ECC controls
Escalation runbooks agreed with your team
Monthly service and risk reports
Evidence ready for audits and regulator reviews
Who delivers each serviceSome managed services are delivered by a vetted delivery partner rather than by CISO Consulting's own team. Each service states who delivers it, and the proposal confirms the delivering party and the contract before you commit. Explore managed security
How the engagement runs
- 1ScopeLog sources, assets, use cases and escalation contacts
- 2OnboardConnect sources, tune detections, rehearse escalation
- 3OperateMonitor, triage and escalate against agreed targets
- 4ImproveReview results monthly and tune the service
What you receive
- SOC service description and escalation matrix
- Use-case and log-source register
- Monthly operations and incident report
- Quarterly service review with recommendations
Packages
| Essential | AdvancedRecommended | Enterprise | |
|---|---|---|---|
| Monitoring hours | Business hours | Extended hours | Round the clock |
| Log and sensor coverage | Core sources | Core and cloud sources | All sources, including custom and OT |
| Response | Notify and recommend | Guided containment | Authorized containment |
| Critical alert triage target | One hour | Thirty minutes | Fifteen minutes |
| Reporting | Monthly | Weekly and monthly | Weekly, monthly and board-ready |
| Service review | Quarterly | Monthly | Monthly with executive review |
The exact scope and targets are confirmed in your proposal.
Questions
Who runs the operations center?
This service may be delivered by a vetted delivery partner under CISO Consulting oversight, or by our own team. The proposal names who delivers it before you commit.
Does the data leave the Kingdom?
Not unless you agree to it. Monitoring is designed around the residency and data classification rules that apply to you.