Why Converge
One Team, Every Signal
Unified Event Feed
Physical, IT, and OT alerts flow into a single monitoring console.
Cross-Trained Analysts
SOC analysts trained across physical security, IT, and OT threat patterns.
24/7/365 Coverage
Continuous monitoring and escalation, including Saudi public holidays and off-hours.
Compliance Reporting
Incident and event reporting formatted for HCIS and NCA audit requirements.
Capability
Core SOC Functions
Threat Detection
Correlated detection across PIDS, CCTV, access control, IT, and OT telemetry.
Incident Response
Documented response procedures for physical intrusions and cyber incidents alike.
Continuous Improvement
Regular tuning of detection rules based on observed alert patterns per site.
FAQ
Converged IT/OT SOC - FAQ
What does a converged SOC monitor that a standard SOC does not?
A standard IT SOC typically monitors only network and endpoint security events. A converged SOC additionally ingests physical security alarms (PIDS, access control, CCTV analytics) and OT/ICS telemetry, correlating all three domains so an analyst can see, for example, a badge anomaly and a network anomaly at the same facility together.
Is a converged SOC required for HCIS Class 1 facilities?
HCIS directives require defined security management and monitoring capability appropriate to a facility's classification; a converged SOC is one way higher-classification facilities meet continuous monitoring expectations across their full physical and cyber security posture.
Can Tektronix operate a SOC on our behalf, or only design one?
Tektronix supports both models: designing and handing over a client-operated SOC, or providing ongoing managed SOC monitoring and response services, depending on the client's internal security operations capability and preference.
