How to squeeze all the juices out of SOC? Preparing to connect an external Incident Monitoring Center