This document lays out the metrics they use to manage their operation and the pace (continuously, weekly, monthly, quarterly) key reports are pulled and shared more broadly. I thought you would find this useful for your own incident detection and response program.
