Section 3: SOC Triage Playbook
Completion requirements
Draft a one-page triage playbook showing when an analyst may use AI assistance, what evidence must be checked, and when human escalation is required.