The core message of the session is that DICTU’s move from a traditional SOC mindset to a Cyber Defense Center is meant to centralize security functions, raise detection and response maturity, and combine defensive, intelligence, and offensive capabilities in one organizational unit. Robin de Haas and Martijn Peijer frame the shift with a checkers-versus-chess analogy: a SOC monitors and responds, while a CDC thinks ahead strategically, uses more pieces, and actively reduces attackers’ options. DICTU’s context makes this urgent: it is one of the largest IT suppliers in the Dutch central government, monitoring more than 40,000 devices, more than 1,500 applications, and more than 6,000 servers, with a yearly revenue of €400,000,000.