Your SOC Stops at the Firewall. Should It? - Part 1
The ITSM Practice: Elevating ITSM and IT Security KnowledgeShow Notes
Does your SOC really protect the entire business, or does its visibility stop at the firewall? In this episode of The ITSM Practice Podcast, Luigi Ferri explores drone threats against data centers and what they reveal about gaps between Cybersecurity, Physical Security, Facilities, IT Operations and Business Continuity. Discover why CISOs need to rethink the traditional cyber attack surface and focus on protecting the complete service.
In this episode, we answer to: Where should the SOC security perimeter really end? How can CISOs identify the true attack surface of a critical business service? Who owns the incident when Cybersecurity, Physical Security and Facilities each detect different parts of the same threat?
Resources Mentioned in this Episode: Bird & Bird website, article "European Commission Counter-UAS Action Plan", link https://www.twobirds.com/en/insights/2026/uk/european-commission-counter-uas-action-plan
Commercial UAV News, article "How Counter-UAS Infrastructure Is Building the Foundation for Commercial Drone Operations", link https://www.commercialuavnews.com/counter-uas-europe-commercial-drone-infrastructure
Digitalisation World website, article "Drones and Datacenters: An Unexpected Aerial Adversary Amidst the AI Boom", link https://digitalisationworld.com/blogs/58771/drones-and-datacenters-an-unexpected-aerial-adversary-amidst-the-ai-boom
BBC News, article "Amazon Says Drones Damaged Three Facilities in UAE and Bahrain", link https://www.bbc.com/news/articles/cgk28nj0lrjo
DW website, article "Germany Investigates Drone Flights Over Industrial Park", link https://www.dw.com/en/germany-investigates-drone-flights-over-industrial-park/a-70021895
Maris-Tech website, article "CUAS (Counter Unmanned Aerial Systems): A Complete Guide for Defense & HLS Teams", link https://www.maris-tech.com/blog/cuas-counter-unmanned-aerial-systems-a-complete-guide-for-defense-hls-teams/
Connect with me on: LinkedIn: https://www.linkedin.com/in/theitsmpractice/ Website: http://www.theitsmpractice.com And if you want more tips and guidance, follow me on LinkedIn. I am sharing daily posts regarding Enterprise Service Management, IT Service Management, and IT Security.
Credits: Sound engineering by Alan Southgate - http://alsouthgate.co.uk/
Graphics by Yulia Kolodyazhnaya
More from The ITSM Practice: Elevating ITSM and IT Security Knowledge
How can an MSP grow revenue without growing headcount at the same rate? In this episode of The ITSM Practice Podcast, Luigi Ferri explores how MSPs can protect margins through a scalable Target Operating Model, standardization, automation, AI, knowledge management, self-service, suppliers, and Professional Services.
What happens when a cyber-physical threat crosses Cybersecurity, Physical Security, Facilities and IT Operations? This episode explores how SOC teams can correlate signals, establish incident ownership, define escalation thresholds and build a unified operating model to protect critical infrastructure and business services.
AI that summarizes an incident is one thing. AI that disables accounts, isolates endpoints and blocks connections is another. In this episode of The ITSM Practice Podcast, Luigi Ferri explains the ITIL 5 6C Model for AI and why CIOs, CISOs and MSPs need to stop asking, “Are we using AI?” and start asking, “What are we allowing AI to do?”
A critical vulnerability is not automatically a critical business risk. If your CMDB only tells you which server is affected but not the customer, service, contract, SLA, or revenue behind it, you are missing the information that matters. This episode explains why CISOs need a business-aware CMDB to connect technical risk with real business impact.
Is your security stack actually protecting you, or are you just paying for too many tools? This episode looks at security tool sprawl, unused capabilities, overlapping products, skills gaps and vendor dependency. Before buying another security product, understand what you already have, what your team can actually operate and what would really happen if you switched a tool off.