SANS 2025 State of the SOC Survey, sponsored by Elastic

Security operations centers (SOCs) are a core component of an organization's cybersecurity practice.

What are the capabilities that comprise a SOC, and what is outsourced?

What are the most effective methods of hiring and retaining SOC employees?

And how can AI help?

The SANS 2025 SOC Survey, sponsored by Elastic, explores these questions and more. By surveying active SOC managers and analysts, the report discloses details on capabilities, architectures and cloud use, technologies, hiring and staffing, metrics and funding, and threat intel and automation.

Read the SANS 2025 SOC Survey, and learn how to use results to inform and recalibrate your near-term plans and long-term goals.

Key topics examined include:

1. Capabilities that comprise a SOC and what is outsourced
2. Technology deployment and satisfaction
3. Staff composition, hiring, and retention
4. SOC demographics across the globe
5. Budgets and funding
6. An assessment of AI

Additional resources

• AI for SecOps
• SOC comprehensive guide
• AI for SOC teams: What's real and what's next