Self-assessment

Logging Coverage Score

Identify whether your telemetry can support detection and forensic reconstruction.

Are identity, cloud, SaaS, endpoint, and network logs centralized?
Do detections map to business-relevant attack scenarios?
Is retention designed for forensic depth and cost?
Can archived logs be restored into an investigation workflow?
How to read the score

Use the result to pick the right size of next step.

Each assessment is a quick signal, not a final verdict. A lower score usually means the team needs a focused review soon, a middle score points to a targeted remediation sprint, and a higher score suggests the control set is working but still worth retesting after changes.