SOC绩效指标看板
原名：building-soc-metrics-and-kpi-tracking
构建 SOC 绩效指标和 KPI 跟踪仪表板，用于衡量安全运营中心的效率和效果。
- 分类
- 数据分析
- 版本
- v1.0
- 作者
- 弈韬(@ra1nzzz)
- 下载
- 0
- 收藏
- 0
- 发布
- 2026-08-18
- 更新
- 2026-08-24
- TRACE 评分
- 3.4 / 5
内容概览
Use this skill when: - SOC leadership needs data-driven visibility into operational performance - Continuous improvement programs require baseline measurements and trend tracking - Executive reporting demands quantified security posture and ROI metrics - Staffing decisions need objective workload and capacity data - Compliance audits require documented SOC performance evidence Do not use metrics as punitive measures against analysts — metrics should drive process improvement, not individual performance management. - SIEM with 90+ days of incident and alert disposition data - Incident ticketing system (ServiceNow, Jira) with timestamp data for incident lifecycle - Analyst shift schedules and staffing data - ATT&CK Navigator for detection coverage tracking - Dashboard platform (Splunk, Grafana, or Power BI) Establish the key metrics aligned to NIST CSF functions: Metric Definition Target N…