SOC Metrics Cheat Sheet

Security Operations Center (SOC) metrics are essential for justifying resource allocation, validating processes, and identifying areas for improvement. This cheat sheet outlines a strategy for creating metrics tied to your organization’s mission and security goals, rather than taking a bottom-up approach that may not resonate with stakeholders outside of the SOC. Aligning to standard frameworks like the SOC Capability Maturity Model, or SOC-CMM, ensures a comprehensive measurement approach across SOC domains and aspects.

This cheat sheet supports content taught in LDR551: Building and Leading Security Operations Centers.

Created by SANS Certified Instructor and Author, Mark Orlando.