Security Operations Center

The CSUSB Security Operations Center is tasked with monitoring events and alerts from information systems to detect and respond to security incidents as they occur. The SOC is a collaboration between the Center for Cyber and AI and Information Technology Services. It serves as a hands-on learning opportunity for cybersecurity students under the framework prescribed by the California Division of Apprenticeship Standards.

Responsibilities

• Monitoring and analysis of patterns, anomalies and alerts arriving from:
  • Network traffic flows
  • Firewalls
  • Intrusion Detection and Preventions Systems
  • Anti-malware Software, including eXtended Detection and Response (XDR) agents
  • Cloud Service Providers
  • Security information sharing memberships
  • Email filtering
  • Data Loss Prevention systems
• Notification and escalation of security incidents to appropriate personnel, including:
  • Building investigations from logs and events
  • Identifying appropriate escalation procedures
  • Monitoring for privilege escalations arising from an initial incident

Support and Funding

Significant funding was provided by:

• NCAE grant for the Inland Empire Cyber Security Initiative
• The Tech and Workforce Hub Project earmark awarded during the 118th Congress

Analysts are also employed as Information Technology Services student assistants using state funds and tuition.

Press releases

• Readout: Deputy National Cyber Director Harry Wingo, Jr. Highlights Investments that Provide Good-Paying Cyber Jobs and Prepare the Next Generation of U.S. Cyber Professionals | ONCD | The White House
• Congressman Aguilar delivers ceremonial check for cybersecurity’s Tech and Workforce Hub Project