{"id":11513,"date":"2026-10-13T09:17:45","date_gmt":"2026-10-13T09:17:45","guid":{"rendered":"https:\/\/isoft.ao\/servicos\/soc-instalacoes-cliente\/"},"modified":"2026-10-13T09:17:45","modified_gmt":"2026-10-13T09:17:45","slug":"soc-instalacoes-cliente","status":"publish","type":"page","link":"https:\/\/isoft.ao\/en\/servicos\/soc-instalacoes-cliente\/","title":{"rendered":"On-premises SOC"},"content":{"rendered":"
\"\"
Service 06 \u00b7 Cybersecurity<\/span>

On-premises SOC<\/h1>

Security monitoring with local control of data and processes.<\/p>

Talk to us<\/a>See the scope<\/a><\/div><\/div><\/section>
The solution<\/span>

We design and implement a Security Operations Centre at your premises, combining technology, processes and operational team readiness. For banks, telecoms, public bodies and groups that cannot send logs abroad, an on-premises SOC gives central visibility over every system while the data, the tools and the decisions stay inside the organisation. We build it in stages so that monitoring starts early and grows with the team's capacity.<\/p><\/div>

Business value<\/h3>

Centralised visibility and organised response while retaining local governance.<\/p><\/div><\/div><\/section>

Service scope<\/span>

On-premises SOC<\/h2>

Four stages, each with a clear deliverable. Where AI helps, it is marked.<\/p>

01<\/span>

SOC architecture, log sources and retention requirements<\/h3>

Which systems to monitor, which events matter, how long to keep them, and the servers, storage and network the SOC needs.<\/p><\/div>

02<\/span>

SIEM deployment and security tool integration<\/h3>

Installation and tuning of the SIEM, collection from firewalls, servers, Active Directory, endpoints and applications, and integration with existing security tools.<\/p>Alert enrichment<\/span><\/div>

03<\/span>

Use cases, alert correlation and triage procedures<\/h3>

Detection use cases written for your environment, correlation rules that reduce noise, and step-by-step triage procedures for each alert type.<\/p>Assisted triage<\/span><\/div>

04<\/span>

Dashboards, escalation, training and operational support<\/h3>

Management and analyst dashboards, an escalation path to incident response, analyst training, and support while the team settles into shifts.<\/p>Investigation copilot<\/span><\/div><\/div><\/div><\/section>

AI use cases<\/span>

Three AI use cases, all optional<\/h2>

Optional. Every AI feature uses data you approve, can be switched off, and keeps a person in the loop.<\/p>

<\/svg>

Alert enrichment<\/h3>

Adds context to each alert automatically: asset owner, known vulnerabilities, recent changes and threat intelligence matches.<\/p><\/div>

<\/svg>

Assisted triage<\/h3>

Proposes a severity and a first action for each alert based on your procedures, so analysts confirm rather than start from zero.<\/p><\/div>

<\/svg>

Investigation copilot<\/h3>

Answers analysts' questions over the SIEM data in plain language and drafts the investigation notes, running entirely on premises.<\/p><\/div><\/div><\/div><\/section>

When this service makes sense<\/span>

Security monitoring with local control of data and processes.<\/h2>