Question 6 of 10Pro Only
What are the key performance metrics used to measure SOC effectiveness, and how does an L1 analyst contribute to improving them?
Sample answer preview
There are several key performance metrics that measure how well a SOC is functioning, and as an L1 analyst, my work directly impacts most of them. Mean Time to Detect, or MTTD, measures the average time between when a security event occurs and when the SOC identifies it.
MTTDMTTRMTTAfalse positive rateescalation accuracyalert closure rate