SOC Metrics Cheat Sheet
Security Operations Center (SOC) metrics are essential for justifying resource allocation, validating processes, and identifying areas for improvement. This cheat sheet outlines a strategy for creating metrics tied to your organization’s mission and security goals, rather than taking a bottom-up approach that may not resonate with stakeholders outside of the SOC. Aligning to standard frameworks like the SOC Capability Maturity Model, or SOC-CMM, ensures a comprehensive measurement approach across SOC domains and aspects.
This cheat sheet supports content taught in LDR551: Building and Leading Security Operations Centers.
Created by SANS Certified Instructor and Author, Mark Orlando.
May 1, 2025
