MSSP SOC reporting has a metrics problem #03

Cyber All Day · Aug 24, 2026 · 49m

First part of my conversation with Dave MCKENZIE, Cyber Risk Reducer, at Cyber Increment.

CHAPTERS

(00:00) - In this episode & intro

(01:20) - Dave’s introduction

(04:34) - Dave jokes that he “tortures” vendors for a living

(07:47) - The story behind his talk at Security BSides London, “You Scored 46” - and why SOC metrics matter

(12:34) - For the purposes of his talk, he went to AI and asked for a monthly service delivery report + scope + inventory

(15:57) - AI averages the internet, vendor claims & pure filler slides

(17:00) - The industry doesn't know how to measure SOC performance: MSSP…