Measuring what matters in a SOC #04

Cyber All Day · Sep 2, 2026 · 50m

Second part of my conversation with Dave MCKENZIE, Cyber Risk Reducer, at Cyber Increment.

CHAPTERS

(01:28) - Why Dave hates Mean Time to Detect (MTTD)

(07:00) - Why SOCs need to measure the quality of their data and signals

(13:01) - Confirmation rates + and why the math often doesn't add up

(18:00) - It’s very difficult to measure quality, but it’s very valuable + an example

(19:29) - Example: how to define the metrics that actually matter to your organisation

(23:41) - Mean Time to Respond (MTTR) - and why the number doesn't necessarily inspire confidence

(32:06) - Why SOC severity levels…