Skip to content
VOC.

01 · VOC area

Operating Model

A VOC is not a scanner with a dashboard: it is a function that owns the vulnerability lifecycle end to end. This area covers the charter, the operating cadence, maturity stages, and a RACI that makes remediation owners accountable without turning security into a ticket factory.

Guides in this area

  1. How to build a Vulnerability Operations Center (VOC)

    What a Vulnerability Operations Center is, how it differs from a SOC or a scanning team, and how to charter, staff and run one step by step.

  2. VOC roles and responsibilities: a practical RACI

    Who does what in a Vulnerability Operations Center: core roles, a full RACI across the lifecycle, and how the VOC works with the SOC, IT and developers.