A Community Security Operations Centre (ComSOC) Model for SMMEs in Developing Countries

Cybercriminals may target small, medium, and micro enterprises (SMMEs) as entry points to large enterprises through violations of third-party supply chain rules. Due to a lack of financial and human resources, SMMEs are often compelled to outsource their cybersecurity needs to third-party cybersecurity service providers. To mitigate cyber-attacks or eliminate the possibility of being the weakest link in the value chain, SMMEs need to collaborate and share resources. Our central contention is that SMMEs in developing countries lack resources, such as financial and human capital, to implement emerging or advanced cybersecurity solutions. This paper explores the Community Security Operations Centre (ComSOC) model for SMMEs in developing countries. The ComSOC model is our proposed cybersecurity solution for SMMEs in developing countries. This model seeks to adapt or tailor-make the SOC services according to the specific needs of the SMMEs that intend to utilise advanced SOC services but lack the necessary resources to do so. Therefore, this paper’s primary objective and outcome are to conceptualise the ComSOC model for SMMEs in developing countries. This model will serve as a guideline for SMMEs in developing countries to implement emerging or advanced cybersecurity solutions adapted to their specific needs, allowing SMMEs who could not otherwise afford to utilise the large enterprise SOC services. The sharing of resources will enable the SMMEs to implement these SOC services while minimising the cost of implementation.