This requires a Risk Operations Center, or ROC. When CISOs hear the phrase “Risk Operations Center” they invariably ask, “How is a ROC different from a Security Operations Center?” ...