A SOC Readiness Assessment typically follows a two to four-weeks timeline depending upon scope. Maturity and Transformation Assessments are phased engagements that include a Discovery Phase (kick-off, stakeholder workshops, technology reviews) and an Analysis Phase (maturity scoring, gap identification, roadmap development). The exact duration depends on organisational complexity, which is confirmed during the scoping call.

No. A core focus of Lumen's assessments — particularly the Transformation Assessment — is leveraging your existing tools. The assessment examines opportunities for workflow automation, readiness for automated incident response, and the practical use of AI-assisted detection using your current technology stack. Recommendations focus on where current tools can be better utilised or augmented, not replaced.

Lumen's methodology aligns to international and regional frameworks including NIST CSF, MITRE ATT&CK, ASD Essential Eight, ASD ISM, APRA CPS 234, and ISO/IEC 27001, where applicable. These references ensure transformation outcomes are defensible and meaningful to executives, auditors, and regulators.

SOC optimisation focuses on improving what you already have — tuning detection rules, reducing false positives, and automating a few more playbooks within your current operating model. It makes existing processes faster but does not change the model itself. SOC transformation is fundamentally different: it re-examines your entire security operations model across people, process, and technology, and rebuilds it around automation-first principles, AI-enhanced detection, and business-aligned outcomes. Put simply, optimisation asks "how do we do this better?" while transformation asks "should we be doing this at all?" 

SOC Transformation is relevant to any organisation with a Security Operations Centre under pressure, but it delivers the most immediate value in industries facing strict regulatory oversight and high-volume threat exposure. In APAC, that includes financial services (governed by APRA CPS 234, MAS TRM, and HKMA), healthcare (where patient data protection and operational continuity are non-negotiable), government and critical infrastructure (subject to ASD Essential Eight and national cybersecurity directives), and manufacturing (where converging IT and OT environments create expanded attack surfaces that traditional SOCs were never designed to monitor). These industries share a common challenge: rising regulatory expectations, growing threat complexity, and security teams that cannot scale through headcount alone — making a structured, automation-first transformation the most practical path forward.