Cyber SOC

Managed CyberSOC Service for the Dubai Cyber Index

CyberSOC is a scored service of the Dubai Cyber Index. HexaPrime operates your side of it — sustaining the availability of the 12 mandated data sources and resolving DESC CyberSOC alerts in under 3 minutes against a 5-minute DCI SLA, to maintain a CyberSOC score of 5.

Dubai Cyber Index • DCI score • DESC CyberSOC • Managed DCI provider • DESC alert response • DESC log sources • Dubai Government cybersecurity • Managed SOC UAE

About

Cyber SOC

How HexaPrime help you with Cyber SOC!

Under the Dubai Cyber Index (DCI), DESC assesses Dubai Government entities across defined services — CyberSOC being one of them. DESC's CyberSOC ingests and analyses logs from the entity's mandated data sources, correlates them and issues alerts back to the entity. The entity's DCI CyberSOC score is driven by how well it sustains those feeds and how promptly and completely it acts on the alerts raised. As a Managed DCI provider, HexaPrime takes operational ownership of that responsibility: monitoring log source health so the 12 data sources stay connected and reporting, triaging and actioning every DESC CyberSOC alert within the agreed response and closure SLAs, and producing the evidence DESC expects. Scoring and compliance determinations remain with DESC and the entity; HexaPrime delivers and evidences the operational performance behind the score.

Key

Features

Data source availability management — continuous health monitoring of the 12 mandated DESC data sources; detect log-flow interruption, parsing failure or agent loss and restore the feed
Onboarding and integration of data sources — connect in-scope sources to the DESC CyberSOC platform to the required format and standard
DESC alert triage and validation — acknowledge DESC CyberSOC alerts in under 1 minute (MTTA), then validate, enrich and establish scope and impact
Alert response and resolution — take the appropriate action and resolve the alert in under 3 minutes (MTTR), within the 5-minute DCI SLA
SLA governance — measure MTTA and MTTR against the 5-minute DCI SLA on every alert; escalate immediately where a breach is at risk
DCI score management — sustain the response performance that holds the CyberSOC score at 5, with corrective action where metrics drift
Evidence and reporting — alert registers with timestamps, MTTA/MTTR performance, source uptime and DCI score reporting for the entity and DESC
Coordination with DESC — act as the entity's operational interface to the DESC CyberSOC for alerts, feeds and clarifications

Let’s Connect

Please send your work inquiry here...

Thank you! Your submission has been received!

Oops! Something went wrong while submitting the form.

Workflow

How the managed DCI CyberSOC service operates

Service Deliverables

Everything the service delivers. Built around measurable outcomes.

Source Availability & Alert Resolution

Data source availability monitoring and restoration for the 12 mandated DESC sources
Acknowledgement, action and resolution of DESC CyberSOC alerts at MTTA < 1 min and MTTR < 3 min

Alert Register & SLA Reporting

Alert register with receipt, acknowledgement and resolution timestamps, actions taken and justifications
MTTA / MTTR performance reporting against the 5-minute DCI SLA, including breaches and root cause

Uptime & Score Tracking

Data source uptime and log-flow continuity reporting
DCI CyberSOC score tracking against the target of 5, with corrective action plan

Authority & Evidence

Agreed response-authority matrix
Evidence pack supporting DESC / DCI assessment

Service Reviews

Periodic service reviews with the entity

See what Cyber SOC delivers and how it fits your environment.

Talk to a Cyber SOC Expert

FAQs

Frequently Asked Questions

What is the Dubai Cyber Index and how does CyberSOC affect our score?

The Dubai Cyber Index (DCI) is DESC's assessment of cyber maturity across Dubai Government entities. CyberSOC is one of the scored services within it. The CyberSOC score turns on response speed — alerts must be resolved within 5 minutes to hold a score of 5 — alongside consistent log delivery from your mandated data sources.

What are the 12 data sources?

DESC mandates a defined set of log sources that must be onboarded to the CyberSOC for analysis. During onboarding we confirm the current list against your environment, close any gaps and put continuous availability monitoring around each feed.

Does HexaPrime replace the DESC CyberSOC?

No. DESC operates the CyberSOC and issues the alerts. HexaPrime operates the entity side of the service — keeping your data sources available, actioning the alerts DESC raises, and maintaining the evidence and SLA performance that support your DCI score.

What happens if a data source stops sending logs?

Our monitoring flags the interruption, we investigate the cause — agent, connectivity, licensing, parsing or platform change — and restore the feed, then log the gap and its remediation as evidence. Restoring feeds quickly is what prevents availability from eroding your DCI CyberSOC score.

What are the alert response SLAs?

The DCI SLA for a DESC CyberSOC alert is 5 minutes to resolution — meeting it is what holds the CyberSOC score at 5. As a Managed DCI provider HexaPrime operates well inside it: mean time to acknowledge (MTTA) under 1 minute and mean time to resolve (MTTR) under 3 minutes, leaving deliberate headroom against the 5-minute threshold. Performance is measured and reported on every alert.

Do you guarantee our DCI score?

We commit to the operational performance that drives it — MTTA under 1 minute, MTTR under 3 minutes against the 5-minute DCI SLA, source availability and evidence quality — which is what sustains a CyberSOC score of 5. The score itself is determined by DESC, and some inputs sit outside the CyberSOC service.

Managed CyberSOC Service for the Dubai Cyber Index

How HexaPrime help you with Cyber SOC!

How Cyber SOC Works!