This document lays out the metrics they use to manage their operation and the pace (continuously, weekly, monthly, quarterly) key reports are pulled and shared more broadly.  I thought you would find this useful for your own incident detection and response program.

Topic: