MEASURING PROFICIENCY AND EFFICIENCY OF A SECURITY OPERATIONS CENTER

摘要

A method and associated systems for measuring proficiency and efficiency of a security operations center. A processor gathers statistical information that identifies characteristics of a security-operations centers performance of a process during a certain period of time. The processor uses this information to derive values of a set of empirical metrics, and then uses these metric values to derive a set of novel parameters. These parameters quantize characteristics of the organization's proficiency and efficiency when servicing incoming service requests associated with the process. These parameters may also be used to identify proficiency or efficiency standards associated with the organization's past performance and to identify target standards that allow measurement of the organization's current or future performance.

主权项

1. A method for measuring proficiency and efficiency of a security operations center, wherein the security operations center performs a plurality of processes, the method comprising:
a processor of a computer system receiving information about the security operations center's prior performance during a standard time period of a first process p of the plurality of processes; the processor interpreting the received information to generate a plurality of values of one or more empirical metrics, wherein a first subset of the plurality of values comprises values of a first metric of the one or more empirical metrics that each quantify a prior performance of the first process by the security operations center; and the processor deriving a value of a process-capability index C(p), wherein the value of C(p) quantifies, as a function of the first metric, the security operations center's ability to consistently meet quality standards when performing the first process p during the standard time period.