12:00 PM - 12:25 PM (PDT)
Lessons From the Trenches: Building a Threat Led Security Operations Capability (SOC)

In my presentation, I will be sharing the journey we have been on at SA Power Networks over the past 2 years in transforming our in-house cyber security operations towards a hybrid threat-led capability that provides a greater understanding of our cyber threats, proactive threat management and enhanced response, recovery, and reporting activities.


  • Cost reduction in log storage and the identification of overlapping cyber security technologies as they have matured, resulting in further savings.
  • The approach towards a realistic threat rating for organizational cyber risks, raising awareness of the impact and standardizing reporting to our stakeholders.
  • Building and growing SOC talent to think from a threat mindset and clearly understand your ‘why’ to help reduce alert fatigue and burnout.
Session Survey