Australia[]
The Cyber Security Operations Centre (CSOC) was established in the Defense Signals Directorate (DSD) as an initiative of the Australian Government's Defence White Paper to mitigate the cyber threat to Australia's national security.
CSOC has two main roles:
- to provide government with a better understanding of sophisticated cyber threats against Australian interests
- to coordinate and assist operational responses to cyber events of national importance across government and systems of national importance.
CSOC operations also complement DSD's other information security activities.
CSOC identifies malicious activity conducted by sophisticated foreign hackers by using advanced analytic capabilities and techniques. The workforce includes staff highly trained in computer information technology and analysis. This, together with DSD's high powered computing resources, ensures the centre is able to process large volumes of data to identify cyber threats. DSD used this information to proactively and reactively respond to cyber threats.
U.K.[]
The Cyber Security Operations Centre (CSOC) was established by the 2009 Cyber Security Strategy of the United Kingdom: Safety, security and resilience in cyber space. It
- actively monitors the health of cyberspace and co-ordinates incident responses;
- enables better understanding of attacks against UK networks and users; and
- provides advice and information about the risks to business and the public.
It is a multi-agency body hosted by Government Communications Headquarters (GCHQ) in Cheltenham, alongside GCHQ's Information Assurance arm, Communications Electronics Security Group (CESG).