Standards and assurance
CREST SOC accreditation independently validates our security operations
Any provider can say they run a 24/7 SOC. CREST accreditation means an independent industry body has assessed how ours actually works: our people, our processes and the technology behind our Managed Detection and Response service.
Proof that our SOC meets an internationally recognised standard
"We chose to undergo the CREST SOC Accreditation scheme to demonstrate that the service we offer is recognised on the global stage as meeting the highest standards."
- Andy Kays, CEO, Socura
What the CREST SOC assessment covers
To gain accreditation, we submitted detailed evidence of how our SOC operates, and CREST reviewed it against its SOC standard across six areas:
- Organisational environment: How our SOC is structured, governed and staffed, including the skills and competence of our analysts.
- Customer requirements: How we agree what each client needs from the service, and how we deliver against it.
- Technology and tools: The detection and response technologies we use, and how they’re configured and managed.
- Event analysis: How we triage, investigate and escalate security events, from first alert through to response.
- Threat intelligence and situational awareness: How we bring threat intelligence and context into our detection and investigations.
- Protecting the SOC: How we secure our own operations, systems and client data.
Assurance you can check, not just take our word for
CREST accreditation is renewed annually, and every accredited member is listed publicly on the CREST Marketplace, so you can confirm our status in seconds. Accredited members also sign CREST’s enforceable codes of conduct and ethics, giving you an independent route for raising concerns.
We’re also a founding signatory of the CREST AI Charter, committing to responsible AI use across our service.
