The CSUSB Security Operations Center is tasked with monitoring events and alerts from information systems to detect and respond to security incidents as they occur. The SOC is a collaboration between the Center for Cyber and AI and Information Technology Services. It serves as a hands-on learning opportunity for cybersecurity students under the framework prescribed by the California Division of Apprenticeship Standards.
Responsibilities
- Monitoring and analysis of patterns, anomalies and alerts arriving from:
- Network traffic flows
- Firewalls
- Intrusion Detection and Preventions Systems
- Anti-malware Software, including eXtended Detection and Response (XDR) agents
- Cloud Service Providers
- Security information sharing memberships
- Email filtering
- Data Loss Prevention systems
- Notification and escalation of security incidents to appropriate personnel, including:
- Building investigations from logs and events
- Identifying appropriate escalation procedures
- Monitoring for privilege escalations arising from an initial incident
Support and Funding
Significant funding was provided by:
- NCAE grant for the Inland Empire Cyber Security Initiative
- The Tech and Workforce Hub Project earmark awarded during the 118th Congress
Analysts are also employed as Information Technology Services student assistants using state funds and tuition.
Press releases
| Name | Title | |
|---|---|---|
| Brian Vasquez | Director of Information Security & Compliance | Brian.Vasquez@csusb.edu |
| James Macdonell | Lead Information Security Analyst | James.Macdonell@csusb.edu |
| Name | Title | |
|---|---|---|
| Dr Tony Coulson | Executive Director | tcoulson@csusb.edu |
| Dr Vincent Nestler | Director | vnestler@csusb.edu |