Explore SOAR reports

This document explains the role of reports in Google Security Operations and how they can be used to track performance, justify investments, and maintain transparency. Reports are valuable for demonstrating Return on Investment (ROI) to upper management, ensuring accountability to customers, and keeping colleagues informed. They also provide clear, data-driven insights that support better decision-making.

Google SecOps provides analysts with predefined reports and the option to create custom ones. You can export and import reports to other platforms.

The predefined reports include:

• Management – SOC Status: A high-level overview of security operations for leadership.
• Management – Closed Cases: A summary of resolved cases for performance tracking.
• Tier 1 – Open Cases: A view of ongoing cases for Tier 1 analysts.
• ROI – Analysts Benchmark: Metrics for evaluating analyst productivity and ROI.

Manage and work with reports

You can generate, schedule, customize, and manage reports in Google SecOps to monitor SOC performance and demonstrate ROI.

Generate a report

1. Go to Dashboards & Reports > SOAR Reports.
2. Click Generate under the Generate Report column.
3. In the Generate report dialog, select one or more of the following: Environments, Time Frame, File type (PDF or Word).
4. Click Download.
   

Schedule a report

1. Select the report you want to schedule.
2. Select the Scheduler tab and click add Add.
   
3. In the New Schedule dialog, click the Enable toggle to turn on scheduling and enter the required information.
4. Click Save.

Add a new report

1. Click add Add new template.
2. In the New report template dialog, enter a name, and select a Category from the menu.
3. Click Create.

The new report appears in the list of reports.

Edit a report

1. In the list of reports, select the report you want to edit.
2. Select the Edit tab and click add Add.
3. Choose a format for your report: Editor, Pie Chart, Table, or Vertical Bar. A dialog appears based on the selected format.
4. Enter the required information.
5. Click Save.

Generate ROI reports

You can generate a report that shows the return on investment (ROI) of using Google Security Operations.

To generate a report showing ROI, follow these steps:

1. Go to Dashboards & Reports > SOAR Reports.
2. Click local_atm Local ATM and select a report.
3. Click smart_display Smart Display.
4. In the Generate report - Analysts Benchmark dialog, select one or more of the following: Environments, Time Frame, File type (PDF or Word).
5. Click Download. A Word or PDF document showing the estimated savings from using Google SecOps is downloaded to your desktop.