Measuring the efficiency of a detection engineering program
The first metric related to efficiency to be discussed, velocity, is productivity over time. Productivity can be defined as the number of detections but in an agile methodology should be measured in terms of story points. Story points are a unit of measure that is defined by each team as a consistent way of identifying how much work is required. Using points provides the added benefit of allowing team members to consider the complexity and uniqueness of the work required to create the detection. Point estimation requires teams to first normalize the value of a story point by reviewing some sample detections together and creating a consensus view of the points required to complete the work. Once there is a common agreement on point values, team members can estimate the amount of work required to complete a task, such as the creation of a new detection or the update of an existing one. The velocity of the team can therefore...