The Security Operations Center (SOC) at UCI is composed of a subset of the OIT Information Security team and can be contacted at security@uci.edu
The SOC acts as the central coordination point for reporting cybersecurity incidents and work with various Unit personnel for the proper response. They also work with external threat intelligence and monitoring partners, as well as law enforcement. The SOC also directly monitors our central security event logs (network, authentication, email, endpoint where they have visibility) for critical alerts that get escalated for response.
The SOC also manages and coordinates the campus vulnerability management program, performing scans of the campus and escalating high risk vulnerabilities with Units for a timely response.