DEVELOPING A LEVEL 1 SECURITY OPERATION CENTER ANALYST COMPETENCY MATRIX (L1 SOC ACM) BASED ON COMPETENCY TO SUPPORT PERFORMANCE EVALUATION : CASE STUDY ON PT XYZ

Abstract

The complex and dynamic nature of a SOC work environment necessitates that SOC analysts deliver optimal performance. To facilitate this, it is essential to implement a competency evaluation process focused on performance that aligns with the specific conditions of the SOC analyst's workplace. This research aims to develop a framework called L1 SOC Analyst Competency Matrix (L1 SOC ACM) for assessing the competency of L1 SOC Analyst in supporting the performance evaluation. This framework apply a maturity assessment approach that is assessed based on the level of capability in four dimensions of competence, namely professional competencies, personal competencies, social competencies and methodological competencies. In addition, weighting is applied to each competency to produce the level of importance of a competency. By using this framework, the L1 SOC Analyst competency assessment can be carried out more comprehensively and help the competency evaluation process more accurately in prioritizing competencies that must be improved. SOC XYZ was chosen as a case study in the implementation of this framework and matrix because it has a large enough structure and function so that all key competencies used in L1 SOC ACM can be tested. From the results of the implementation of this framework to SOC XYZ, it was found that L1 SOC ACM produced a high match rate of capability (85%) and maturity (100%). This suggests that L1 SOC ACM are appropriate methods for the L1 SOC competency assessment of SOC XYZ.