Recent changes within the cyber security ecosystem, including developments at AARNet, have prompted institutions to reassess Security Operations Centre (SOC) operating and replacement models. This Birds of a Feather session provides vendor agnostic, peer led forum to share practical experiences across institutions, regardless of current SOC provider. Discussion will focus on practical, real world insights rather than procurement outcomes, with an emphasis on what has worked well, what has not, and why.

Participants are encouraged to come prepared to briefly share:

• Their current SOC operating model or provider (in house, managed, hybrid, etc.)
• Aspects of their SOC arrangements that are working effectively
• Identified gaps, challenges, risks, or lessons learned from operating or replacing SOC services

The purpose of the session include developing a shared understanding of common SOC challenges across institutions, gaining peer insight into alternative SOC operational and replacement models, and identifying areas where further collaboration or collective exploration may be beneficial."