KEY CHALLENGES FOR SECURITY OPERATIONS CENTERS IN THE CONTEXT OF FULL-SCALE WAR

Abstract

The article systematizes the key factors defining the effectiveness of commercial and governmental SecurityOperation Centers (SOC) in Ukraine during 2022–2025: degradation of energy and telecommunications infrastructure, occupation and physical loss of IT assets, state-level cyber warfare, workforce crisis, and transitional inconsistency of regulatory norms.Purpose. To identify and assess the impact of environmental constraints on SOC operations under the conditions of amodern full-scale war, and to define the specific characteristics of cybersecurity threats in this context.Methodology. The research combines a review of scientific and analytical sources and Ukrainian regulatory acts with aretrospective comparative analysis of SOC metrics across reference infrastructures.Scientific novelty. The study identifies critical challenges specific to cybersecurity units operating in the context of full- scale warfare and evaluates their influence on SOC performance indicators.Conclusion. The effectiveness of a cybersecurity unit under wartime conditions is determined by its resilience to external disruptions and the availability of appropriate controls. In practice, this requires: redundancy of power supply andcommunications at critical nodes; buffering of telemetry and deferred correlation; pre-defined scenarios for segment and key isolation; hybrid work organization with minimized analyst workload; and unification of control through “security profiles” with transparent mapping to cloud services. The obtained results define priorities for SOC resource allocation and further testing of countermeasures.