ESA's Cyber Security Operations Centre

ESA’s CYBER SECURITY OPERATIONS CENTRE
Protecting ESA Member States’ investments in space.

Under the lead of the ESA Security Office (ESO), C-SOC is designed and built to provide redundant security monitoring and management of the entire ESA infrastructure. For the purpose of resilience, C-SOC is operated out of two locations. The service offering includes the following key capabilities for boosting cyber resilience in corporate and space domains.

Security Event Monitoring
Monitoring, detecting, and alerting to identify potential incidents, including functions to support the detection of space-specific events.

Incident Management and Threat Response
Supporting all phases of incident response and mitigation, using relevant data, expertise, procedures and forensic capabilities.

Threat Intelligence
Providing vulnerability watch and early warning services as well as relevant threat intelligence, allowing for threat-informed and cost-effective system protection.

Posture Analysis
Performing system vulnerability and compliance analyses as well as penetration tests, allowing for proactive cyber protection and informed investment decisions.

Threat Hunting
Identifying active threats proactively by means of advanced host-, network-, and application-based sensors as well as conducting sophisticated cyber deception operations.