Security Operations Center Guidebook

Gregory Jarpey works for Orbital ATK as the Security Operations Manager for Corporate Security. He has more than 20 years of security experience starting in the United States Army as an Infantryman. Greg has his Bachelor’s degree in Business Management and received his PSP (Physical Security Professional) certification from ASIS in 2004. Greg has more than 15 years of experience managing Underwriter Laboratories (UL) certified Security Operation Center as a contractor for Xcel Energy and at Orbital ATK. Greg is a member of and contributor to the ASIS Protection of Assets manuals released in 2012. He hosted a local ASIS chapter meeting in 2010 by conducting a round table about SOC’s. Scott McCoy has more than 30 years of risk management experience starting in the U.S. Army as an explosive ordnance disposal technician. Scott has spent nearly 20 years in corporate security management and received his CPP (Certified Protection Professional certification) from ASIS in 2002. He also received his Certified Information Systems Security Professional (CISSP) and Certified Business Continuity Professional (CBCP) certifications in order to better understand the disciplines of a converged security department, which he formed at Xcel Energy and Alliant Techsystems. He has a Master’s degree in Management, and has five years’ experience as an adjunct instructor teaching masters level courses in decision making, IT security and security management. He has presented at local and national ASIS conferences on background screening and metrics, and has published magazine articles and white papers on utility specific regulatory issues. In addition, he has contributed several chapters on IT security topics.

• Part I – Developing Your Security Operations Center1. What is a Security Operations Center?2. Needs Assessment3. Business Case4. Building Your SOC5. Staffing OptionsPart II – Operations 6. Responsibilities and Duties7. Post Orders and Procedures8. Training Programs9. Enterprise Access Control10. Alarm Monitoring11. Enterprise Video Surveillance12. Working with Your Vendors13. Incident Reporting14. Communication Plan 15. The Emergency Operations CenterPart III – Making the SOC an integral part of your Company16. Customer Service is KEY17. Metrics18. Developing Partnerships19. Brand Recognition20. Continuous Improvement