Decision Workspace

SOC Modernization

Single source of truth for this strategic initiative — objectives, risks, expert guidance and the path to a decision.

Confidence
87%
Status
Decision Ready
Budget
$8.4M / 3yr
Target decision
Q1 2026
Business objective

Replace legacy SIEM with unified XDR + managed hunt to reduce threat dwell time by 80% and enable 24/7 OT coverage.

Decision summary

Wood Mackenzie's current SOC is built on legacy SIEM with limited cloud and OT visibility. Threat dwell time exceeds peer averages by 2.4×. This decision selects the platform and operating model that will carry the firm through 2028, with explicit AI-augmented analyst capacity as a first-class requirement.

Objectives
  • Reduce mean time to detect from 18h to under 4h
  • Achieve unified IT + OT visibility across 11 trading hubs
  • Cut Tier 1 analyst FTE load by 35% via AI triage
  • Stand up 24/7 managed hunt within 90 days of contract
Key risks
High
Migration complexity from legacy SIEM
High
OT environment coverage gaps
Medium
Skills availability for new platform
Medium
Vendor lock-in on managed services
Timeline
Oct 14
Decision opened
Nov 02
Market intelligence sweep delivered
Nov 18
Vendor evaluation matrix complete
Dec 03
Executive briefing — vendor shortlist
Jan 15
Final decision & contract authorization
Stakeholders
PR
Priya Raman
CISO — Owner
MH
Marcus Hale
Head of Infrastructure
EV
Elena Voss
Chief Data Officer
DC
Daniel Cho
VP Procurement
Expert recommendations
HM
Dr. Hannah Mehta
Lead Analyst — Cybersecurity

"Wood Mackenzie's OT footprint and energy threat profile push the recommendation toward CrowdStrike Falcon Complete + Charlotte AI. Confirm Defender economics for non-trading endpoints."

JO
James Okafor
Principal Analyst — Enterprise Architecture

"Wood Mackenzie's OT footprint and energy threat profile push the recommendation toward CrowdStrike Falcon Complete + Charlotte AI. Confirm Defender economics for non-trading endpoints."

Linked intelligence
Related vendor assessments
Open vendor matrix