Find where AI is worth it
- Measure alert volume, time to triage and the share of false positives
- List the work that is repetitive, slow or stuck in documents
- Score each use case by value, feasibility and risk

Use case scoring
12 assessedOwner: SOC manager
Measure: minutes per alert

