Watch this video on YouTube
An SSCP wants to evaluate their organization's ability to identify security incidents. Which metric do they need to track?