High value is placed on organisations already using Microsoft Sentinel and Defender, with internal SOCs of 10+ staff, and a clear need to reduce costs or improve efficiency.
Lower scores for organisations with no SIEM, no SOC, or unclear security operations