The information security department is implementing a security operations center as a managed service offering from a vendor.

Create 1- to 2-page vendor selection policy and accompanying plan that outlines the high-level requirements and criteria for selecting a vendor to implement and manage a SOC as a managed service.

Cite any references according to APA guidelines.

Submit your policy and plan.