Donald,you are absolutely right. 1000 offenses is 10 times to much.100 is maximum. The magic number is 42 of course. This should be your target.40 open offense can be worked on by a single analyst per day. Even if you got 10 analysts working for your SOC team it's too much.Visibility does not scale well.