Security Headcount = ƒ(alerts, time to resolve)
To reduce the headcount number needed to effectively work security alerts, you must:
- Decrease the number of security alerts
- Increase the quality of security alerts
- Reduce the amount of time to investigate security alerts