Our Services
Managed Security Operations Centre (SOC) Service
What we do
NORMA Cyber provides a managed Security Operations Centre (SOC) as an additional service for our members. The SOC can monitor member systems on a 24/7 basis and conduct analysis, respond to, and notify members when cybersecurity related incidents are detected.
Our SOC Philosophy
Technology and vendor agnostic:
We can integrate towards most maritime or corporate system. There is normally no hardware installation needed or particular types of firewall, EDR or switches.
Neutral party:
We have a neutral view on the infrastructure and the SOC team also provides monthly advice on how to increase security posture.
Competence:
We understand the maritime domain with all its complexities.
Synergies:
The knowledge we get from monitoring several maritime companies gives us an unique insight and anonymised content is shared back to our members.
Technical set-up
Flexible set-up and the scope vary between IT on vessels to OT on vessels, to corporate IT or Cloud systems.
Leveraging the most modern SOC systems utilising AI and minimise false positives.
Automation of as much as possible reducing latency in reporting.
Manual response and follow up of the complex cases.
Automated response for IT/cloud systems through our SOAR systems can be provided.
Threat hunting conducted to detect hidden and advanced threats.
SOC for Vessel Operational Technology (OT)
The SOC team now monitors several vessels OT networks. Through the solutions we are able to:
Identify assets and create detailed asset lists.
Identify vulnerabilities and continually evaluate risks.
Detect anomalies and threats.
Act on alerts and perform forensic analysis of events.