Security Event Monitoring (SIEM) & Security Operations Center (SOC)

SIEM collects the relevant log data from the organization’s IT and OT, can then correlate these data, and analyze them to detect anomalies. If it finds anything suspicious, SIEM triggers a warning, which is then followed up by security experts.

A Security Operations Center (SOC) can be operated internally or externally. Here, qualified experts analyze information, mainly from SIEM, but also from other sources. This service often needs to be available 24/7 and is therefore frequently transferred to external providers. In defined levels, the experts can also take action themselves if there is an incident and, for example, switch off critical systems, and they can also provide support in forensic measures.

Request Solution


of our customers are engaged in a SOC project

100k EUR p.a.

is considered a reasonable minimum budget for an SOC

50k EUR p.a.

as an indicative value for an SIEM for approx. 1,000 staff


Specify requirements


Anonymous tender under Bosch brand


Transparent comparison of top 3 providers


Provider pitches and customer decision

Main selection criteria

  • 24/7 availability
  • Monitoring capabilities
  • Scalability
  • Integration & Implementation

We are happy to support you around your cybersecurity needs:

+49 (0)711 811-91494

Book an appointment

Potential providers (not exhaustive):

Read case studies

How our service uncovered the security vulnerabilities of a leading global automation technology provider

How CyberCompare helped an automation manufacturer find a qualified provider for a complex training program

How an international technology group introduced effective asset management with our support