SOC Analyst Capacity Calculator

Calculate Security Operations Center analyst capacity based on alert volume, investigation time, and shift coverage. Determine staffing to meet SLA targets

Each component has a specific meaning:

• Alert volume — The alert volume recorded for the patient or scenario being assessed.
• Investigation time — The investigation time recorded for the patient or scenario being assessed.
• Shift coverage — The shift coverage recorded for the patient or scenario being assessed.

Note: Interpret the soc capacity result against the clinical thresholds and context described above.

Enter the alert volume, investigation time, shift coverage for the patient or scenario you are assessing. Calculate Security Operations Center analyst capacity based on alert volume, investigation time, and shift coverage. Determine staffing to meet SLA targets. Use the soc capacity result to inform your clinical assessment.