Prepare a short "talking points" paper in which you answer the question: What best practices should Sifers-Grayson follow when establishing a SOCC?

In your talking points, you should address how your selected best practices support the phases of the incident response process (i.e. Incident Detection, Containment, Eradication, & Recovery) and discuss the role of that a Security Operations Center will play in making sure that incidents are handled and reported in an effective and efficient manner.

Your "talking points" should be 3 to 5 paragraphs long (15 – 25 specific bullet points).

Your audience is a group of Sifers-Grayson executives who are reviewing the plans for establishing an internal SOCC. (Outsourcing the SOCC was considered and that option was rejected.)

Provide in-text citations and references for 3 or more authoritative sources. Put the reference list at the end of your article.