https://www.swisscom.ch/en/business/enterprise/themen/security/soc-csirt-funktionsweise.html
How does a Security Operations Centre (SOC) work? | Swisscom
But how does such a SOC work, and how does it interact with the "IT fire brigade", the CSIRT? A (fictitious) security incident shows how.
security operations centresoc workswisscom