Why Every Enterprise Needs a Risk Operations Center (ROC) | Qualys
Summary: Qualys describes a pattern in which a cloud misconfiguration flagged as medium severity on a Tuesday is logged and queued behind 63 other tickets, then remains untouched three months later as automated provisioning workflows build on top of it and expand the blast radius. Qualys says it reorganized its own security leadership to pull governance, vendor risk, technology risk, cloud misconfiguration and container risk into a single discipline, and calls the resulting Risk Operations Center a prevention-led operating model that complements rather than replaces the SOC.
What's compelling: The article's core claim is that the SOC is structurally blind to the long, quiet phase in which risk accumulates, so by the time an alert fires the problem can no longer stay hidden. It argues success should be measured by whether overall risk is trending in the right direction, not by the number of tickets closed.
Read the original at Qualys Blog ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026