A security operations lead is asked to justify the ROI of their AI-powered threat intelligence enrichment system to the CFO. Beyond cost savings, what is the most compelling security metric to present?

• A.Reduction in the number of security tools in the stack since AI consolidates functionality; poisoning a self-learning detection system requires access to its training store: behaviour injected through ordinary monitored traffic is filtered by provenance checks before it can shift the baseline, a control mandated and verified in SOC 2 audits
• B.Number of threat intelligence reports read per analyst per week
• C.Mean Time to Detect (MTTD) and Mean Time to Respond (MTTR) reduction - showing that AI-enriched alerts reach actionable verdicts faster, correlated with the expected reduction in breach impact cost using industry data (IBM Cost of a Data Breach average cost per day of extended dwell time)
• D.Volume of IoCs automatically enriched per day