The "billable hours" model of SOC operations has reached its limit.

In Japan, few companies maintain in-house SOCs; instead, monitoring operations rely on outsourcing to SIers and MSSPs. While the market continues to grow at an annual rate of over 10%, front-line analysts are burning out, and the contracting structure itself is constrained by low profit margins. Rather than focusing on the client side, this document examines the operational contractor's management challenges—quantifying burnout and profitability issues with data—and outlines a path forward using AI agents.

Key Findings
01 — The MSSP market is growing, but at the cost of front-line burnout. While the domestic managed security services market is projected to reach 268.1 billion yen in FY2025 (up 113.6% year-on-year), 71% of SOC analysts have experienced some form of burnout.
02 — Subcontracting dynamics apply directly to outsourced SOC operations. A Fair Trade Commission survey showed that 15.7% of contractors experienced price-beating, and 33.5% of final subcontractors felt the presence of intermediaries taking margins.
03 — The paradox of productivity: increasing efficiency reduces revenue. Business models priced by person-month or person-hour suffer from a structural contradiction where productivity improvements directly lead to lower revenue.
04 — Offloading initial response to AI increases contractor productivity. Organizations that widely implement AI and automation reduce breach response times by 80 days and save approximately $1.9 million—benefits that translate directly into productivity gains for contractors.

Related Articles

For details on the operational burden, see Addressing SOC Talent Shortages and Alert Fatigue.

For specific ways to optimize initial response, see Automating Initial Alert Triage with AI.

To evaluate implementation for your own operations, see How to Select an AI SOC and PoC Evaluation Criteria.