Journal

Choosing metrics for weekly SOC reviews

Analytics charts on a desk monitor

Weekly SOC reviews collapse when every chart fights for attention. Pick a small set: mean time to acknowledge high-severity tickets, percentage of tickets with a clear owner, and reopen rate after closure.

Volume trends matter, but only beside context — a campaign week will look ‘worse’ on volume even when the desk performed well. Annotate spikes rather than hiding them.

Include one qualitative note from each shift lead. Numbers explain load; notes explain friction with tooling, vendors, or escalation paths.

Retire metrics that never change decisions. If a chart has not prompted an action in two months, it is decoration, not analytics.