Security monitoring in the next-generation SOC must become smarter than it is today. For years, the SOC has been defined by SIEM tools that collect information about security-related “events” on the network. The SOC will get smarter not by consolidating on a few security systems, but by improving the ability of analysts to pull relevant data from many different systems and correlate it to find the source of a threat. Today’s SOC staff of the future will do more proactive monitoring and less reactive monitoring, experts say.”]