Tashkent – Recently, a specialized conference dedicated to one of the most pressing topics in the field of information security – building monitoring and incident response centers (SOC) and automation of protection processes – was held. The event was organized by DAAC digital together with Muk Distribution and Palo Alto Networks, a world leader in cybersecurity.

The event was aimed at senior executives (C-levels, IT directors, IS department heads) and aimed to demonstrate a strategic approach to cyber defense that goes beyond simply buying equipment.

SOC building strategy: an integrator’s perspective

The conference was opened by the presentation of DAAC Digital experts. The introductory part was devoted to the architecture of a modern SOC. The speakers dwelt in detail on the key systems that make up the core of the monitoring center:

XDR (Extended Detection and Response);
SIEM (Security Information and Event Management);
SOAR (Security Orchestration, Automation and Response).

Special attention was paid to management aspects: resource planning and assessing the time required to build a mature SOC from scratch. It was emphasized that a SOC is not only about technologies, but also about well-defined processes and people.

Training and skills development: from engineer to analyst

A separate emphasis was placed on the fact that launching a SOC is impossible without a qualified team.
During the conference, options for comprehensive staff training were presented, positioned as a mandatory stage in building a SOC:

For network engineers: adaptation programs and in-depth study of NGFW security architecture, enabling them to maintain the infrastructure effectively.
For SOC analysts: specialized tracks on incident handling, threat hunting and the use of automation systems (XDR/SOAR).

Experts noted that investments in training allow a company not only to obtain a configured tool, but also to build internal expertise needed for rapid response to threats without constant dependence on external providers.

Unshakable leadership: NGFW from Palo Alto Networks

In the section dedicated to network security, participants were reminded why Palo Alto Networks (PAN) solutions have held leading positions in the Gartner quadrants for many years. A brief overview was given of the updates in the line of next-generation firewalls (NGFW), which provide the foundation for securing the perimeter and the internal network.

Cortex ecosystem: automation as a necessity

The central topic of the event was the presentation of the Cortex product family, designed to fully equip a SOC. The speakers explained in detail the capabilities of the Cortex XDR and Cortex XSOAR integration, which not only detects sophisticated threats but also automates routine incident responses, reducing the workload on analysts.

For top management, innovative products that shape the future of information security were presented:

Cortex Xpanse – a solution for attack surface management that allows organizations to see their vulnerabilities “through the eyes of a hacker”.
Cortex XSIAM – a platform that uses artificial intelligence to radically accelerate SOC operations.

Trends, legislation and the realities of Uzbekistan

In the closing part of the conference, experts discussed global information security trends for 2024–2025 in relation to the local context. Issues of compliance with the legislation of the Republic of Uzbekistan and the specifics of using Palo Alto Networks solutions in the infrastructure of local companies were examined.

The main conclusion of the meeting: a modern SOC requires a comprehensive approach. The Palo Alto Networks solutions presented at the conference are positioned not just as a set of tools, but as a single ecosystem tailored to business needs and enabling decision-makers to keep their organization’s cyber resilience under constant control.