I recently updated this document which provides a basic framework for assessing your organization's maturity in the domain of incident detection & response...covering people, processes, as well as technology. Please use it freely and provide back any feedback that you have!