Skip to content 
So you´re considering building your own SIEM SOC, there are many parameters to consider, in this article we will focus on the costs. The cost for a 24/7 fully functional Security Operations Center (SOC) operating a SOC around the clock is crucial for continuous monitoring and immediate response to security incidents.
Here’s a breakdown of the cost for a scenario for a company with aprox. 2,000 employees, considering 24/7 operations:
- Personnel Costs for 24/7 Operations
- Running a SOC 24/7 requires multiple shifts of security analysts, incident responders, and management staff.
- Depending on the region, the size of the team, and the level of expertise required, the salary costs alone can easily range from $300,000 to $700,000 annually. This accounts for shift differentials and the need for more staff to cover all hours, including weekends and holidays.
2. SIEM Software Costs:
- The licensing costs of SIEM software for 24/7 operations don’t typically change, but the scale of monitoring might increase the price range to $20,000 – $60,000 annually.
3. Infrastructure and Software Tools:
- Hardware costs for setting up the SOC infrastructure (including backup and redundancy for 24/7 operations) can range between $30,000 to $80,000.
- Additional software tools for threat intelligence, incident response, and other security measures may cost between $10,000 to $40,000.
4. Training, Maintenance, and Incident Response:
- Ongoing training for staff working in shifts: $10,000 to $20,000 annually.
- Maintenance and upgrades (including 24/7 support from vendors): 5-10% of the total software and hardware costs annually.
- Incident response planning and exercises, particularly crucial for 24/7 operations: $20,000 to $40,000 annually.
5. Cyber Insurance:
- The cost varies greatly depending on coverage but is an essential consideration for comprehensive risk management.
