Security Operation Center with People-Process-Technologies

1. Trellix solutions
2. Special CSIRT training provided by Mandiant
3. SimSpace: Cyber Range Platform

• Сyber workforce shortfall
• Hiring challenges
• Acquiring technologies and hardware in the post-COVID-19 era, characterized by disruptions in supply chains
• Implementation and integration of other, sometimes legacy systems challenges

The Central Bank of Armenia (CBA) plays a pivotal role in ensuring the robustness and security of Armenia's financial sector and critical financial market infrastructure. With a long-term vision to fortify the overall cyber resilience of this sector, the CBA must expediently and accurately evaluate its cyber risk profile, encompassing people, processes, and technology. It aims to devise a comprehensive roadmap for enhancements, both within the CBA itself and throughout the broader financial sector. This strategic plan involves the establishment of a Cyber Security Operations Center (SOC) and a Cyber Security Incident Response Team (CSIRT).

The most pressing and widespread issue in every market globally revolves around the acute shortage of adequately trained and qualified cybersecurity professionals who can efficiently operate and manage SOC and Incident Response teams. To address this challenge, the CBA is embarking on diverse training programs. In a groundbreaking initiative, the CBA is working towards the implementation of an on-premises cyber range training platform, designed to nurture a larger pool of cybersecurity talents. The primary goal is not limited to serving the CBA alone but extends to benefit the entire financial sector and the country as a whole.

Simultaneously, efforts are underway to establish a Cyber Defense Center. The underlying objective of the Cyber Defense Center Development service is to empower the CBA in more effectively managing its security processes and proactively addressing forthcoming cyber threats. This is achieved through the establishment of a Security Operations Center (SOC) to:

• Enhance Defense Posture: The SOC seeks to identify and rectify vulnerabilities in security monitoring and response capabilities, thus bolstering its capacity to ward off advanced cyber threats.
• Foster Consensus on Security Improvements: By sharing knowledge and prioritizing enhancements, the CBA endeavors to promote internal collaboration and communication, ensuring that security improvements are universally embraced.
• Mitigate the Impact of Security Incidents: The SOC's core purpose is to augment its capabilities in detecting and responding to security incidents, thereby minimizing cyber risks and safeguarding the financial sector.