For environments that are secure by design, a ‘full-fat SOC’ is not always required.Source:: NCSC Guidance