Reference Architectures / Canonical Set

SIEM, SOAR, NDR, and Security Operations Center

A federated, evidence-bearing security operations architecture integrating telemetry, SIEM, detection engineering, SOAR, NDR, case management, response, and incident learning.

MMYTHOSSYSTEMSRA-002REFERENCE ARCHITECTURESSIEM, SOAR, NDR, andSecurity OperationsCenterCANDIDATE27 PP

Publication record

RA-002

Publication class
Reference Architecture
Status
Candidate
Revision
1.0.0-candidate
Pages
27
Controls / criteria
18
Authority validated
Sep 17, 2026
Review or expiration
Mar 17, 2027
File size
163 KB

Reader

Read the publication

RA-002_SIEM-SOAR-NDR-and-Security-Operations-Center.pdf Open full screen

Searchable, bookmarked PDF, 27 pages. Loads on request (163 KB).

Candidate status describes publication review state. It does not establish certification, legal compliance, implementation conformance, benchmark reproduction, or product readiness.

Related

View collection →