January 9, 2026
Cyber Defense Center: Next Generation SOC, the Future of Enterprise Cyber Security
In the dynamic landscape of cyber security, where threats are becoming more diverse and complex, the need for strong cyber defense has become more critical than ever. Relying solely on passive cyber security measures is no longer enough. Organizations must adopt adaptive and proactive approaches to protect their digital assets better. One solution that addresses this challenge is Cyber Defense Center (CDC). To explore what a Cyber Defense Center is and how it benefits enterprise security, we spoke with Wahyu Eko Putro, Cyber Security Expert and Solution Architect at Xapiens, with over 15 years of experience in the cyber security field. What Is a CDC in the Context of Cyber Security? CDC stands for Cyber Defense Center. Simply put, it can be described as beyond SOC or the next generation of SOC. In a traditional Security Operations Center (SOC), the focus is typically on people, processes, and technology that monitor or conduct security surveillance of organizational assets. CDC takes this concept one step further. Not only monitors threats, CDC also builds a more comprehensive, adaptive, and resilient cyber defense capability. A capability that are ready to face next-generation cyber threats. Why Is CDC Considered the Next Generation of SOC? For many users or clients, SOCs are often perceived has too passive approaches. Their role is usually limited to monitoring and issuing recommendations when cyberattack occurs. While this looks good on paper, in practice it often becomes problematic, especially when facing new types of cyberattacks with threat models that we have never seen before. CDC goes beyond passive monitoring. It introduces proactive activities such as threat hunting. In traditional SOCs, threat hunting typically exists only at the L3 (third-layer) level. While in CDC, this capability is brought down to L1 (first-layer), meaning that teams operating 24/7 are not only monitoring and analyzing but are also actively hunting for threats. In other words, while monitoring is taking place, threat hunting is conducted simultaneously. As the team is searching for vulnerabilities and ensuring that attacks are not only detected but also responded swiftly and accordingly. Why Is CDC Important, Especially for Companies in Indonesia? Based on our field experience, many organizations have already invested heavily, tens to hundreds of millions, in building SOCs, including teams, technologies, SOPs, and processes. Yet, these SOCs often do not perform optimally. Attacks still goes undetected. The issue is not necessarily that the technology is not advanced enough nor the team lacks capability. But on the gap that lies in the system design and the approach being used. This is where CDC and the concept of threat hunting become crucial. One of CDC’s key roles is conducting proactive and adaptive monitoring, not only against threats but also against weaknesses within the SOC system itself. How About Implementation? Is It Difficult or Practical? At Xapiens, our philosophy is to avoid burdening our clients. From implementation perspective, we assist as much as possible, from start to finish. This includes not only initial sizing but also the assessment. The client’s role is primarily provide approval and give us trust to operate the CDC. Then review the assessment results and recommendations we give. The process is similar to an audit: We conduct an assessment to understand the existing condition We deliver findings and recommendations, including: The ideal CDC model to implement The risks involved if CDC is not implemented We fully understand that many companies have never had a SOC at all. In such cases, they often don’t know where to begin. That’s why our team provides a clear framework and roadmap based on the assessment. Giving step-by-step actions and an implementation roadmap that organizations could follow. What Other Advantages Does Xapiens’ CDC Offer? Xapiens’ strength lies in the fact that we are not only a cyber security company, but we also a technology company. This means we don’t operate separately. At Xapiens, we have various solutions and teams, including: ERP IoT and NOC Database solutions Application development teams All of these are interconnected. The Xapiens Cyber Security and CDC teams collaborate closely with these teams because we understand that organizational assets extend beyond security alone. They also include infrastructure, databases, and applications. Our principle is that cyber security should not be exclusive, but inclusive. CDC is not just about security tools. We also need to understand databases, infrastructure, and applications. With this approach, CDC becomes a collaboration of multiple Xapiens solutions, working together to build a reliable defense system. Any Final Message for Our Readers? If I may, let me close by borrowing a quote from Warren Buffett: “It takes 20 years to build a reputation and five minutes to ruin it.” In today’s digital era, those five minutes may already be too late, perhaps even before we finish our cup of coffee. That is where the Cyber Defense Center comes in: ensuring that what gets “disconnected” is not our business, but our vulnerabilities, the threats, and the attacks that aim to damage a company’s reputation.