Establishment of a Monitoring Center and Prompt Response to Information Security Incidents (SOC) in the Company

Student: Zavadskaya Ekaterina

Supervisor: Elena Baranova

Educational Programme: Information Security Management (Master)

Year of Graduation: 2018

The number of incidents and the severity of their consequences are increasing every year. Nevertheless, many companies do not still realize the importance of incident management process and can not confront the attacks. Law No. 187 "On the Security of Critical Information Infrastructure of the Russian Federation" obliges organizations related to the critical infrastructure subjects to create GOSSOPKA centers. In this paper, the international and Russian standards, guidelines and practices for information security incidents management are reviewed and methodical recommendations for the creation of GOSSOPKA center in the organization are provided.

Student Theses at HSE must be completed in accordance with the University Rules and regulations specified by each educational programme.

Summaries of all theses must be published and made freely available on the HSE website.

The full text of a thesis can be published in open access on the HSE website only if the authoring student (copyright holder) agrees, or, if the thesis was written by a team of students, if all the co-authors (copyright holders) agree. After a thesis is published on the HSE website, it obtains the status of an online publication.

Student theses are objects of copyright and their use is subject to limitations in accordance with the Russian Federation’s law on intellectual property.

In the event that a thesis is quoted or otherwise used, reference to the author’s name and the source of quotation is required.

Search all student theses