`
 

Security Headcount = ƒ(alerts, time to resolve)

 

To reduce the headcount number needed to effectively work security alerts, you must:

  • Decrease the number of security alerts
  • Increase the quality of security alerts
  • Reduce the amount of time to investigate security alerts