This is a IT Security Metric Dashboard (Diamond) Report, it is one of reports that Balanced Scorecard Designer can generate for IT Security KPI. With this software you can also design your own scorecards, KPIs and metrics.

IT Security Scorecard

Report includes: 1 day(s), from 28.10.2008 to 28.10.2008

Name

Start value

End value

Dynamic

Contains

IT Security Scorecard

56,93 %

0 %

Risk Management	(60,3%, 0%)
Contingency Planning	(72,8%, 0%)
System Life Cycle	(36,9%, 0%)
Personnel Security	(50,5%, 0%)
Data Integrity	(52,5%, 0%)

Graph for IT Security Scorecard

Data for IT Security Scorecard

Dates	Value
28.10.2008	56,93

Risk Management

Name

Start value

End value

Dynamic

Parent

Contains

Risk Management

60,28 %

IT Security Scorecard

Indicators

Security Plan

Security Controls

Graph for Risk Management

Data for Risk Management

Dates	Value	Weight
28.10.2008	60,28	3

Security Plan

	Name	Start value	End value	Dynamic	Measure units	Optimization method	Parent
	Security Plan	55,9	55,9	0	%	Maximize	Risk Management

Description Description: Security Plan metrics quantify the percentage of systems with approved system security plans and the percentage of current system security plans.

Measure: The percentage of systems with approved system security plans."

Graph for Security Plan

Data for Security Plan

Dates	Weight	Min	Max	Value
28.10.2008	4	0	100	55,9

Security Controls

	Name	Start value	End value	Dynamic	Measure units	Optimization method	Parent
	Security Controls	63,2	63,2	0	%	Maximize	Risk Management

Description Description: Security Controls metrics determine the efficiency of closing significant system weaknesses by evaluating the existence, the timeliness and effectiveness of a process for implementing corrective actions.

Measure: The time required for implementing corrective actions"

Graph for Security Controls

Data for Security Controls

Dates	Weight	Min	Max	Value
28.10.2008	6	0	100	63,2

Contingency Planning

Name

Start value

End value

Dynamic

Parent

Contains

Contingency Planning

72,84 %

IT Security Scorecard

Indicators

Backup Frequency

Incident Response Capability

Graph for Contingency Planning

Data for Contingency Planning

Dates	Value	Weight
28.10.2008	72,84	2

Backup Frequency

	Name	Start value	End value	Dynamic	Measure units	Optimization method	Parent
	Backup Frequency	67,2	67,2	0	%	Maximize	Contingency Planning

Description Description: Backup Frequency depends on changes frequency and data value

Measure: Backup frequency time period"

Graph for Backup Frequency

Data for Backup Frequency

Dates	Weight	Min	Max	Value
28.10.2008	7	0	100	67,2

Incident Response Capability

	Name	Start value	End value	Dynamic	Measure units	Optimization method	Parent
	Incident Response Capability	86	86	0	%	Maximize	Contingency Planning

Description Description: Incident Response Capability metrics quantify the percentage of agency components with incident handling and response capability and the number of incidents reported to FedCIRC, NIPC, and local law enforcement

Measure: The number of components with incident handling and response capability"

Graph for Incident Response Capability

Data for Incident Response Capability

Dates	Weight	Min	Max	Value
28.10.2008	3	0	100	86

System Life Cycle

Name

Start value

End value

Dynamic

Parent

Contains

System Life Cycle

36,88 %

IT Security Scorecard

Indicators

OMB requirement

Audit Trails

Graph for System Life Cycle

Data for System Life Cycle

Dates	Value	Weight
28.10.2008	36,88	1

OMB requirement

	Name	Start value	End value	Dynamic	Measure units	Optimization method	Parent
	OMB requirement	57	57	0	%	Maximize	System Life Cycle

Description The percentage of systems that are in compliance with the OMB requirement for integrating security costs into the system life cycle

Measure: Systems with integrating security costs"

Graph for OMB requirement

Data for OMB requirement

Dates	Weight	Min	Max	Value
28.10.2008	6	0	100	57

Audit Trails

	Name	Start value	End value	Dynamic	Measure units	Optimization method	Parent
	Audit Trails	6,7	6,7	0	%	Maximize	System Life Cycle

Description Audit Trails metrics quantify the percentage of systems on which audit trails provide a trace of user actions

Measure: Systems on which audit trails provide a trace of user actions"

Graph for Audit Trails

Data for Audit Trails

Dates	Weight	Min	Max	Value
28.10.2008	4	0	100	6,7

Personnel Security

Name

Start value

End value

Dynamic

Parent

Contains

Personnel Security

50,45 %

IT Security Scorecard

Indicators

Security Awareness

Authentication and Authorize Processing

Graph for Personnel Security

Data for Personnel Security

Dates	Value	Weight
28.10.2008	50,45	2

Security Awareness

	Name	Start value	End value	Dynamic	Measure units	Optimization method	Parent
	Security Awareness	53,9	53,9	0	%	Maximize	Personnel Security

Description Description: Security Awareness metrics concern with the percentage of employees with significant security responsibilities who have received specialized training.

Measure: Employees who have received specialized security training"

Graph for Security Awareness

Data for Security Awareness

Dates	Weight	Min	Max	Value
28.10.2008	7	0	100	53,9

Authentication and Authorize Processing

	Name	Start value	End value	Dynamic	Measure units	Optimization method	Parent
	Authentication and Authorize Processing	42,4	42,4	0	%	Maximize	Personnel Security

Description Description: Authentication and Authorize Processing measurements.

Measure: Non-public data that is accessible after authorization"

Graph for Authentication and Authorize Processing

Data for Authentication and Authorize Processing

Dates	Weight	Min	Max	Value
28.10.2008	3	0	100	42,4

Data Integrity

Name

Start value

End value

Dynamic

Parent

Contains

Data Integrity

52,48 %

IT Security Scorecard

Indicators

Logical Access Controls

Anti-virus and spyware protection

Graph for Data Integrity

Data for Data Integrity

Dates	Value	Weight
28.10.2008	52,48	2

Logical Access Controls

	Name	Start value	End value	Dynamic	Measure units	Optimization method	Parent
	Logical Access Controls	6	6	0	%	Maximize	Data Integrity

Description Description: Logical Access Controls metrics concern with the number of users with access to security software that are not security administrators

Measure: The number of users with access to security software that are not security administrators"

Graph for Logical Access Controls

Data for Logical Access Controls

Dates	Weight	Min	Max	Value
28.10.2008	2	0	100	6

Anti-virus and spyware protection

	Name	Start value	End value	Dynamic	Measure units	Optimization method	Parent
	Anti-virus and spyware protection	64,1	64,1	0	%	Maximize	Data Integrity

Description Description: The number of systems protected with anti-virus, anti-spyware and firewall software

Graph for Anti-virus and spyware protection

Data for Anti-virus and spyware protection

Dates	Weight	Min	Max	Value
28.10.2008	8	0	100	64,1

Created by: AKS-Labs
Report created with Balanced Scorecard Designer at 20.11.2008 17:18:45