Skip to content

Managed SOC Services

The Managed SOC Services page allows you to configure Security Operations Center (SOC) contact details and define how to manage remediation issues. The Managed SOC Services settings page appears in the Control Panel when a workspace subscription includes at least one module with the corresponding SOC add-on enabled.

Note

Managed SOC Services settings are applied individually to each workspace. Child workspaces do not inherit SOC settings from channel workspaces.

Accessing the SOC settings page

To access the Managed SOC Services page:

  1. Log into the Coro console and select Control Panel from the toolbar:

    Accessing the Control Panel

  2. Under Protection, select Managed SOC:

    Managed SOC

    The Managed SOC Services page appears:

    SOC page

    Note

    Managed SOC is visible on the Control Panel when a workspace subscription includes at least one module where the corresponding SOC add-on is enabled.

Creating a SOC contact

To create a SOC contact:

  1. Click + ADD SOC CONTACT from the Contacts tab on the SOC settings page:

    Add contact

    The Create SOC contact dialog appears:

    Create SOC contact

  2. Enter a First name, Last name, and Email for the SOC contact.

  3. Select a Notification settings option:

    • Email: Notifications are sent for all issues via email.

    • Email - Critical issues only: Notifications are sent for critical issues via email. The Coro SOC team determines whether an issue is classified as critical.

    • Do not notify: Issues do not trigger notifications.

  4. Click Save:

    Save SOC contact

    The SOC contact is created and a confirmation banner message appears:

    SOC contact created notification

    The SOC contact appears on the SOC list:

    SOC list

Editing a SOC contact

To edit an existing SOC contact:

  1. Click the 3-dot menu adjacent to the SOC contact:

    SOC 3-dot menu

  2. Click Edit:

    Edit SOC contact

  3. After editing the SOC contact, click SAVE.

    The SOC contact details are updated and a confirmation banner message appears:

    SOC contact created notification

Deleting a SOC contact

To delete a SOC contact:

  1. Click the 3-dot menu adjacent to the SOC contact:

    SOC 3-dot menu

  2. Click Remove:

    Remove SOC contact

    The Remove SOC contact confirmation dialog appears:

    Remove SOC contact confirm

  3. Click YES, REMOVE.

    The SOC contact is deleted and a confirmation banner message appears:

    SOC contact created notification

Managing remediation issues

To manage remediation issues:

  1. Click the Remediation tab from the SOC settings page:

    Remediation

  2. Select a remediation option. The following remediation options are available:

    • Remediate issues myself based on recommendations from the Coro SOC team: Remediate issues yourself. Notifications are sent in accordance of the notification level specified when creating a SOC contact.

    • Allow the Coro SOC team to remotely remediate issues on my behalf: Allow the Coro SOC team to remediate issues remotely. Coro updates your SOC contacts in accordance of the notification level specified when creating a SOC contact.

      After selecting Allow the Coro SOC team to remotely remediate issues on my behalf, a consent dialog appears:

      Remote remediation

      Review the consent conditions and Click CONFIRM to authorize the Coro SOC team to perform remote actions on your Coro workspace.