Wargaming Insights: Is Investing in a SOC Worth It?

This article uses wargaming and simplified Markov chain models to compare preventive controls with detection-and-response, showing that adding even modest per-step detection (10%) reduces overall attack success from roughly 49% to 26% and raises expected attempts from ~2 to ~3.84; it further argues that defense-in-depth effectiveness scales with the quality of layers while detection/response can scale more efficiently across the kill chain—highlighting that even limited detection, when paired with effective incident response, can significantly disrupt intrusions.