Which of the following is the best metric for an organization to focus on given recent investments in SIEM, SOAR, and a ticketing system?