312-39V2: Certified SOC Analyst v2

Question

NationalHealth, a government agency that manages sensitive patient health records, is subject to strict data-sovereignty regulations requiring all data to be stored and processed within the country’s borders. Agency leadership is highly concerned about the risks of outsourcing security operations because they must retain complete control over the handling of patient data. They also face growing cyber threats and need 24/7 security monitoring capability. The agency has a large budget and can hire many security professionals. Given the need for 24/7 security monitoring and the emphasis on retaining complete control over sensitive data, which SOC model would be suitable for its needs?

Explanation

An in-house/internal SOC provides direct organizational control over security personnel, monitoring processes, systems, and sensitive patient-data handling. It best supports stringent data-sovereignty requirements and round-the-clock monitoring when the organization has adequate budget and staffing capacity.

312-39V2: Certified SOC Analyst v2

AstroTutor

Notes

Readiness

QuestionQ75

Community Discussion