While some incidents need to be elevated to the CISO, allowing SOC analysts to take actions during lower-level incidents can prevent them from escalating.
