What exactly entails an incident response exercise (like a Red/Tiger team excercise)? How does it add value to a security operations center? Is there any good resource I can read up on how to set up a 24x7 security operations center SOC? I am also looking at engaging expertise on SOC for my company. What are some of the basic requirement that I should look for when engaging external vendor to help me plan how the SOC should be set up? thanks in advance.