RSMM
RSMM · Metrics Calculator

The SIEM numbers that decide whether it was worth it

Thirty-eight metrics with explicit formulas across the RSMM capability dimensions. Enter the counts you already have. Nothing here needs a consulting engagement to produce.

If you cannot measure detection effectiveness, you are measuring log volume and calling it security. Leading indicators tell you what will happen. Lagging ones tell you what already did.
Not started
0/38

Your SIEM scorecard

Bands are starting points. Tune them to your environment, then leave them alone so the trend means something.

Dimension profile

Average of completed percentage metrics per dimension.

What the numbers say

    Run the sanity checklist