SIEM/SOAR solution options for Jisc Security Operations Centre

Jisc operates a Security Operations Centre (SOC) providing managed security monitoring, detection, and response services to organisations across the UK education and research sector. As part of the ongoing evolution of the SOC capability, Jisc is assessing future platform options to support its detection, investigation, automation, and response functions. This includes reviewing potential solutions that provide Security Information and Event Management (SIEM), extended detection and response (XDR), Security Orchestration, Automation and Response (SOAR), and supporting telemetry pipeline capabilities. This is an information gathering exercise. It is neither a selection nor tender exercise; no evaluation, or award will result from this process. Information supplied in this process will be used to support a decision on the most appropriate route to market/viable solution and potentially inform a future procurement process.