Security Operations Center
The Security Operations Center (SOC) dashboard provides a comprehensive view of key metrics that highlight the effectiveness of security operations managed by Kyndryl Security Operations Center managed services. This dashboard enables organizations to monitor security operations effectively. It identifies anomalies, tracks security vulnerabilities, and measures remediation progress to strengthen overall security and governance.
Accessing the Security Operations Center
To access the Security Operations Center dashboard in Kyndryl Bridge, you need a subscription. This allows your organization to monitor security operations and identify unusual activity.
After subscribing to the Security Operations Center Managed Service, complete user onboarding for console access. You can register as an individual or as part of a customer account.
Step 1: Subscribe
- From the Kyndryl Bridge main menu, go to Catalogs → Bridge Service Catalog → Security and Resiliency category → Kyndryl Security Operations Center Managed Services.
- Click Select a Service and select Submit Request.
The admin gets notified to onboard a service for an account. Subscribers can now view services managed by Kyndryl Security Operations Center.
Step 2: Subscribe
To access the Security Operations Center dashboard on Kyndryl Bridge, register for a personal account or contact your Kyndryl account focal to get an invitation for a Customer Account. Follow the steps described in User OnboardingUser Onboarding.
Security Operations Center Dashboards
The Security Operations Center dashboard supports the monitoring of the Kyndryl Security Operations Center managed services. To make monitoring easier, the dashboard provides an overview of the service, plus separate dashboards for three security domains:
- Security Information and Event Management (SIEM)
- Endpoint Detection and Response (EDR)
- Vulnerability Management (VM).
Each dashboard includes controls for selecting a Start Date and an End Date. By default, both dates are set to the current date and time. The start date must be a valid date that is on or before the end date. To adjust one or both dates, click the Update Date Range button and choose the desired date and/or time.
Main capabilities
- Service Overview: Displays the key managed service metrics (mean time to detect, respond, resolve, contain, and escalate).
- SIEM: Shows security information and event management metrics such as detection sources, statuses, event count, and total storage consumed.
- EDR: Highlights endpoint detection and response metrics such as detection sources, statuses, severity, and agent health.
- VM: Highlights vulnerability management dashboard metrics including scanned asset count, scan count, vulnerability count, and age.
To access Security Operation Center, from the Kyndryl Bridge main menu, go to Services → Kyndryl Services →Security & Resiliency → Security Operations Center.