P
Patrick Cooper
Security Operations Center (SOC) Analyst II at the Center for Internet Security (CIS), featured on the Cybersecurity Where You Are podcast.
2
APPEARANCES
2
PODCASTS
012
DEC 30
JAN 6
JAN 13
JAN 20
JAN 27
FEB 3
FEB 10
FEB 17
FEB 24
MAR 3
MAR 10
MAR 17
MAR 24
MAR 31
APR 7
APR 14
APR 21
APR 28
MAY 5
MAY 12
MAY 19
MAY 26
JUN 2
JUN 9
JUN 16
JUN 23
JUN 30
JUL 7
JUL 14
JUL 21
JUL 28
AUG 4
AUG 11
AUG 18
AUG 25
SEP 1
SEP 8
SEP 15
SEP 22
SEP 29
OCT 6
OCT 13
OCT 20
OCT 27
NOV 3
NOV 10
NOV 17
NOV 24
DEC 1
DEC 8
DEC 15
DEC 22
DEC 29
JAN 5
JAN 12
JAN 19
JAN 26
FEB 2
FEB 9
FEB 16
FEB 23
MAR 2
MAR 9
MAR 16
MAR 23
MAR 30
APR 6
APR 13
APR 20
APR 27
MAY 4
MAY 11
MAY 18
MAY 25
JUN 1
JUN 8
JUN 15
JUN 22
JUN 29
JUL 6
JUL 13
JUL 20
JUL 27
AUG 3
AUG 10
AUG 17
AUG 24
AUG 31
SEP 7
SEP 14
SEP 21
SEP 28
OCT 5
OCT 12
OCT 19
OCT 26
NOV 2
Oct 21, 2026
Episode 210: The CIS SOC — Keeping Security Operations Human
1:11
13:54

Sean AtkinsonHOST
So as we go through this day in the life of the SOC, what does a typical shift look like from start to finish? Patrick, please.
P
1:21Patrick CooperGUEST
Yeah, so our shifts normally start off with a shift change, a 30-minute meeting.
P
1:35Patrick CooperGUEST
Other times, if there's a widespread alert we want to talk about or some specific intelligence, we will.
12 MINS LATER

Sean AtkinsonHOST
What do we look for with operational reporting? And what type of reports does a SOC typically produce? And what do we condition in terms of our membership and sending those types of reports for? What does that look like?
Episode 210: The CIS SOC — Keeping Security Operations Human
1:11
13:54

Sean AtkinsonHOST
So as we go through this day in the life of the SOC, what does a typical shift look like from start to finish? Patrick, please.
P
1:20Patrick CooperGUEST
Yeah, so our shifts normally start off with a shift change, a 30-minute meeting.
P
1:26Patrick CooperGUEST
Most importantly, kind of just to go over with the incoming shifts, kind of just what happened throughout the day.
P
1:35Patrick CooperGUEST
Other times, You know, if there's a widespread alert we want to talk about or some specific intelligence, we will.
12 MINS LATER

Sean AtkinsonHOST
What do we look for with operational reporting and what type of reports does a SOC typically produce? And what do we condition in terms of our membership and sending those types of reports for? What does that look like?