Evaluate the maturity and capabilities of your Security Operations Centre
Cybersecurity has become top-of-mind for many organisations. According to PwC's 2025 Global Digital Trust Insights Survey, more than three fifths (66%) of CIOs rank cyber risks as the most critical threats their organisations plan to mitigate within the next 12 months. This highlights the importance of ensuring the efficiency and maturity of security operations, not only for individual organisations but also for the solutions provided by Managed Security Service Providers (MSSPs).
To achieve this, PwC's experts utilise the Security Operations Centre – Capability Maturity Model (SOC-CMM) methodology, which offers a structured assessment of your Security Operations Centre (SOC). Our team can assist you in identifying critical areas for improvement and provide tailored recommendations to help improve your operational maturity.
The SOC-CMM assessment can help:
Assessment of the Security Operations Centre using the SOC-CMM methodology
The SOC-CMM model consists of 5 domains and 26 aspects, that are each evaluated using a specialised tool.
The following domains are included in the maturity assessment:
- Business – converting business requirements into security and incident management specifications
- People – the quantity and type of staff competencies available
- Process – presence of all necessary processes and the evaluation of their maturity
- Technology – capability of technology used
- Services – capability of core services delivered by the provider
The assessment is performed by PwC's experts who have extensive experience in operational cybersecurity and are certified in the SOC-CMM methodology. Our team gathers data through workshops and interviews with key stakeholders, reviews overall and process documentation, and examines the technology in use. Subsequently, they document the evidence supporting their final conclusions and provide an expert opinion and evaluation.
This methodology allows for the measurement of SOC maturity, facilitating objective evaluations and data-driven decision-making.
