Cybersecurity Glossary: Terms Explained in Plain English | TecnetOne

What Are SOC Tiers (Tier 1, 2 and 3)? | TecnetOne Glossary

Written by Tecnet One | Oct 19, 2026, 5:53:34 PM

SOC tiers are the way a security operations center (SOC) divides the work of its analysts. Tier 1 reviews each alert and decides whether it is real; Tier 2 investigates confirmed cases and contains them; Tier 3 hunts for threats the rules missed and improves detection. Each tier escalates to the next one whatever it cannot resolve on its own.

Go deeper on the TecnetBlog: What Is a SOC and When to Hire It as a Service?

SOC Tier 1, SOC analyst levels, Tier 2 SOC analyst, Tier 3 SOC analyst, SOC escalation