logo

How to measure SOC quality

ID: fac0e3f6-ca42-55d0-87fc-34745558591a

STIX ID: report--fac0e3f6-ca42-55d0-87fc-34745558591a

Feed Name: Expel Blog

Date Published: 2021-06-02

Date Updated: 2026-04-27

Author: Matt Peters; Jon Hencinski

...
...

## Executive Summary This post outlines Expel's SOC quality program: use ISO 2859-1 (AQL) to determine representative sample sizes for alerts, investigations, and incidents; employ Jupyter notebooks and the pandas library to randomly select samples; inspect samples daily using standardized QC check sheets; and track pass/fail metrics to drive remediation, automation, training, and continuous improvement so that scale and quality improve together.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.