Team OKR example

Improve SIEM visibility through diversified log monitoring

A starting point for clearer priorities and measurable progress. Make the targets your own.

Suggested timeframe: Set with your team1 objective · 3 key results
YOUR STARTING POINTTeam OKRs
OBJECTIVE

Improve SIEM visibility through diversified log monitoring

  1. KR 1

    Train 80% of IT personnel on the enhanced SIEM visibility and log management

  2. KR 2

    Identify and integrate 10 new types of logs into the SIEM system

  3. KR 3

    Achieve real-time monitoring on 90% of all integrated logs

Ideas to get you moving
  • Monitor and document training completion rates
  • Arrange SIEM visibility training sessions
  • Identify IT personnel requiring enhanced SIEM training
  • Test and troubleshoot the integrated logs in the SIEM system
  • Configure the SIEM system to ingest new log types
  • Research and select 10 new types of logs for SIEM integration
  • Continuously track and report coverage percentage
  • Identify and catalogue all existing integrated logs
  • Implement real-time monitoring tools for these logs
Example targets. Adapt to your baseline before you start.

About this template

The OKR revolves around enhancing the visibility of Security Information and Event Management (SIEM) through diversified log monitoring. Key objective is to train 80% of IT personnel on enhanced SIEM visibility and log management. Initiatives include monitoring and documenting training completion rates, arranging trainings, and identifying personnel in need of enhanced training.

Another objective is to identify and integrate 10 new types of logs into the SIEM system. This will be achieved through researching and selecting new log types, configuring the SIEM system to ingest these logs, and testing them for any issues that might occur during the process.

The third objective focuses on achieving real-time monitoring on 90% of all integrated logs. To achieve this objective, it would require continuous tracking and reporting of coverage percentage, cataloging all integrated logs, and implementing real-time monitoring tools for these logs.

Overall, this OKR is focused on improving SIEM visibility and effectiveness through training, log integration, and real-time monitoring. The fulfillment of these objectives will lead to better handling of security issues, due to early detection and prompt response.

Make it work for your team

01

Set your baseline. Check where you are today, then choose targets that stretch your team.

02

Agree on ownership. Give each key result a clear owner and a source of data.

03

Check in every week. Review the numbers, share confidence, and decide what needs attention.

Get this template as YAML

A machine-readable version of this example for a script or AI assistant.

---
title: Improve SIEM visibility through diversified log monitoring
objectives:
- title: Improve SIEM visibility through diversified log monitoring
  outcomes:
  - title: Train 80% of IT personnel on the enhanced SIEM visibility and log management
    from: 0.0
    to: 100.0
    score_format: _number_%
    initiatives:
    - title: Monitor and document training completion rates
    - title: Arrange SIEM visibility training sessions
    - title: Identify IT personnel requiring enhanced SIEM training
  - title: Identify and integrate 10 new types of logs into the SIEM system
    from: 0.0
    to: 100.0
    score_format: _number_%
    initiatives:
    - title: Test and troubleshoot the integrated logs in the SIEM system
    - title: Configure the SIEM system to ingest new log types
    - title: Research and select 10 new types of logs for SIEM integration
  - title: Achieve real-time monitoring on 90% of all integrated logs
    from: 0.0
    to: 100.0
    score_format: _number_%
    initiatives:
    - title: Continuously track and report coverage percentage
    - title: Identify and catalogue all existing integrated logs
    - title: Implement real-time monitoring tools for these logs