QuestionQ10
ObservabilityYou are the SOC manager at a large enterprise that uses Google Security Operations (SecOps). You must create a report showing the Return on Investment (ROI) attributable to analyst activities in Google SecOps SOAR for the previous month. The report must include the time saved and efficiency gains from using SOAR features. You need to produce this report with the most efficient and accurate approach while providing the required level of detail. What should you do?
- A Create a custom Google SecOps SOAR search query that filters for all cases handled by specific analysts in the last month. Export the results to a spreadsheet for analysis and ROI calculation.
- B Use the ROI - Analysts Benchmark report in SOAR Reports. Configure the report to display data for the desired time period, and filter by individual analysts.
- C Use the filters and visualizations in the Management - SOC Status report in SOAR Reports to extract case-specific performance data.
- D Develop a Google SecOps SOAR playbook that automatically aggregates analyst performance metrics, incorporates custom weighted factors for different case types, calculates ROI based on predefined formulas, and generates a PDF report on a monthly schedule.
Community Discussion