Introduction The Security Operations Center (SOC) and Computer Security Incident Response Team (CSIRT) are core components of the CISO organization, responsible for protecting enterprise IT assets through proactive monitoring, rapid detection, and decisive incident response. Together,