Security Operations is measured by key performance metrics. These tell leadership how effective the SOC is.
Dwell Time: How long an attacker is present in the network before detection. Industry average can be over 200 days. MTTR (Mean Time To Respond): How quickly the SOC triages, investigates, and remediates once an alert fires.