Development of Security Operation Center (SOC) Governance Blueprint Based on Consideration of Process Maturity Level Parameters

In connection with the development of information technology and its ability to exchange data quickly, precisely and accurately, making the use of information technology today is more than just supporting business activities, but has also entered into the company's core business activities, a company is required to increase the level of governance maturity. information security that covers IT and OT in the company, especially for companies where currently there is no governance that covers all areas of Information Technology (IT) and Operation Technology (OT), so there is a need to develop a Governance Blueprint especially for Supervision through the Security Operation Center. Security Operations Center responsible for monitoring, detecting, and responding to security threats to an organization's computer systems and networks. In addition, the limited competence of human resources in carrying out governance and supporting technology is an indicator that needs to be analyzed. This paper explains our understanding and results of our analysis of the needs of the SOC Governance Blueprint, as well as describes the solutions and approaches we offer to achieve the objectives of these activities. Overall, the solutions and services listed in this proposal will be able to meet the objectives of the SOC Governance Blueprint and are also in line with governance standards such as COBIT or ITIL Process Maturity Framework or similar.