if we move to an MSP SOC, and we are considering one which utilizes splunk and provides coverage of ATT&CK, we will revisit our coverage percentage and introduce additional items as needed