This is a Data Leakage Balanced Scorecard Report, it is one of reports that Balanced Scorecard Designer can generate for Data Leakage scorecard. With this software you can also design your own KPIs, Balanced Scorecards and metrics.

Data Leakage Prevention

Report includes: 1 month(s) 49 day(s), from 04.05.2008 to 22.06.2008

Name

Start value

End value

Dynamic

Contains

Data Leakage Prevention

56,44 %

47,1 %

-9,34 %

Risk Management	(23,4%, -61,1%)
Security Controls	(79,3%, 8,1%)
Authorized Processing	(55,5%, 20,75%)
Data Integrity	(25,1%, -12,34%)

Graph for Data Leakage Prevention

Data for Data Leakage Prevention

Dates	Value
04.05.2008	56,44
11.05.2008	44,03
18.05.2008	63,67
25.05.2008	56,05
01.06.2008	47,1
08.06.2008	52,49
15.06.2008	40,07
22.06.2008	47,1

Risk Management

Name

Start value

End value

Dynamic

Parent

Contains

Risk Management

84,45 %

23,35 %

-61,1%

Data Leakage Prevention

Indicators

Risk Assessment

Management Involvement

Physical and Environmental Checks

Audit Trails *

* - Information for this metric is limited in sample report Description This indicator helps in knowing that whether or not the company has adopted risk assessment strategies and that how often they are performed.

Graph for Risk Management

Data for Risk Management

Dates	Value	Weight
04.05.2008	84,45	2
11.05.2008	52,27	2
18.05.2008	64,43	2
25.05.2008	46,76	2
01.06.2008	52,2	2
08.06.2008	55,61	2
15.06.2008	39,52	2
22.06.2008	23,35	2

Risk Assessment

	Name	Start value	End value	Dynamic	Measure units	Optimization method	Parent
	Risk Assessment	81,1	4,8	-76,3	%	Maximize	Risk Management

Description Percentage of systems on which risk assessment exercise and documentation was carried on over the last three years

Graph for Risk Assessment

Data for Risk Assessment

Dates	Weight	Min	Max	Value
04.05.2008	3	0	100	81,1
11.05.2008	3	0	100	10,5
18.05.2008	3	0	100	90,1
25.05.2008	3	0	100	9,4
01.06.2008	3	0	100	40,8
08.06.2008	3	0	100	35,6
15.06.2008	3	0	100	30,3
22.06.2008	3	0	100	4,8

Management Involvement

	Name	Start value	End value	Dynamic	Measure units	Optimization method	Parent
	Management Involvement	87,1	13,7	-73,4	%	Maximize	Risk Management

Description Perecentage of systems for which risk assessment was carried out with the involvement of management

Graph for Management Involvement

Data for Management Involvement

Dates	Weight	Min	Max	Value
04.05.2008	2	0	100	87,1
11.05.2008	2	0	100	98
18.05.2008	2	0	100	26,7
25.05.2008	2	0	100	53,9
01.06.2008	2	0	100	97,4
08.06.2008	2	0	100	24,5
15.06.2008	2	0	100	84,1
22.06.2008	2	0	100	13,7

Physical and Environmental Checks

	Name	Start value	End value	Dynamic	Measure units	Optimization method	Parent
	Physical and Environmental Checks	99,2	49,3	-49,9	%	Maximize	Risk Management

Description Percentage of information systems libraries that record the deposit or withdrawl of storage media to ensure a reduction in possible risk of data leakage

Graph for Physical and Environmental Checks

Data for Physical and Environmental Checks

Dates	Weight	Min	Max	Value
04.05.2008	3	0	100	99,2
11.05.2008	3	0	100	34,6
18.05.2008	3	0	100	85
25.05.2008	3	0	100	94,8
01.06.2008	3	0	100	8
08.06.2008	3	0	100	98,9
15.06.2008	3	0	100	23,7
22.06.2008	3	0	100	49,3

Security Controls

Name

Start value

End value

Dynamic

Parent

Contains

Security Controls

71,2 %

79,3 %

+ 8,1%

Data Leakage Prevention

Indicators

Compliance Level

Tracking Effectiveness

System Security Plans

Encryption *

* - Information for this metric is limited in sample report Description This indicator specifies whether or not security controls have been tested for all the systems in the organization

Graph for Security Controls

Data for Security Controls

Dates	Value	Weight
04.05.2008	71,2	3
11.05.2008	40,37	3
18.05.2008	55,54	3
25.05.2008	59,12	3
01.06.2008	56,74	3
08.06.2008	40,38	3
15.06.2008	37,91	3
22.06.2008	79,3	3

Compliance Level

	Name	Start value	End value	Dynamic	Measure units	Optimization method	Parent
	Compliance Level	99,5	77	-22,5	%	Maximize	Security Controls

Description Perecntage of systems in the organization on which security and evaluation tests were conducted in the previous year

Graph for Compliance Level

Data for Compliance Level

Dates	Weight	Min	Max	Value
04.05.2008	2	0	100	99,5
11.05.2008	2	0	100	79,2
18.05.2008	2	0	100	56,6
25.05.2008	2	0	100	55,8
01.06.2008	2	0	100	39,7
08.06.2008	2	0	100	43
15.06.2008	2	0	100	35
22.06.2008	2	0	100	77

Tracking Effectiveness

	Name	Start value	End value	Dynamic	Measure units	Optimization method	Parent
	Tracking Effectiveness	6,555	10,207	+ 3,652	month	Maximize	Security Controls

Description Average time elapsed between discovery of the incidence of data leakage and taking corrective action

Graph for Tracking Effectiveness

Data for Tracking Effectiveness

Dates	Weight	Min	Max	Value
04.05.2008	3	1	12	6,555
11.05.2008	3	1	12	3,332
18.05.2008	3	1	12	5,235
25.05.2008	3	1	12	2,881
01.06.2008	3	1	12	7,237
08.06.2008	3	1	12	5,73
15.06.2008	3	1	12	2,518
22.06.2008	3	1	12	10,207

System Security Plans

	Name	Start value	End value	Dynamic	Measure units	Optimization method	Parent
	System Security Plans	40,5	80,4	+ 39,9	%	Maximize	Security Controls

Description Percenatge of systems with system security plans in place

Graph for System Security Plans

Data for System Security Plans

Dates	Weight	Min	Max	Value
04.05.2008	2	0	100	40,5
11.05.2008	2	0	100	16,9
18.05.2008	2	0	100	64,8
25.05.2008	2	0	100	84,7
01.06.2008	2	0	100	58
08.06.2008	2	0	100	82,4
15.06.2008	2	0	100	59,3
22.06.2008	2	0	100	80,4

Authorized Processing

Name

Start value

End value

Dynamic

Parent

Contains

Authorized Processing

34,77 %

55,52 %

+ 20,75%

Data Leakage Prevention

Indicators

Authorization

IATO

Background Screening

Interception Protection *

* - Information for this metric is limited in sample report Description This category is concerned with certification and accredition approvals and checks

Graph for Authorized Processing

Data for Authorized Processing

Dates	Value	Weight
04.05.2008	34,77	2
11.05.2008	56,87	2
18.05.2008	72,61	2
25.05.2008	61,14	2
01.06.2008	60,71	2
08.06.2008	47,79	2
15.06.2008	50,63	2
22.06.2008	55,52	2

Authorization

	Name	Start value	End value	Dynamic	Measure units	Optimization method	Parent
	Authorization	41,4	6,2	-35,2	%	Maximize	Authorized Processing

Description Percentage of systems that have appropriate certifications and accreditions

Graph for Authorization

Data for Authorization

Dates	Weight	Min	Max	Value
04.05.2008	3	0	100	41,4
11.05.2008	3	0	100	23
18.05.2008	3	0	100	85,8
25.05.2008	3	0	100	54,1
01.06.2008	3	0	100	87,6
08.06.2008	3	0	100	45,4
15.06.2008	3	0	100	62,5
22.06.2008	3	0	100	6,2

IATO

	Name	Start value	End value	Dynamic	Measure units	Optimization method	Parent
	IATO	12,6	50,4	+ 37,8	%	Minimize	Authorized Processing

Description Perecntage of systems that are operating on an interim authority to operate (IATO) {goal is to reach 0%}

Graph for IATO

Data for IATO

Dates	Weight	Min	Max	Value
04.05.2008	2	0	100	12,6
11.05.2008	2	0	100	4,7
18.05.2008	2	0	100	86,8
25.05.2008	2	0	100	35,8
01.06.2008	2	0	100	55,4
08.06.2008	2	0	100	67,3
15.06.2008	2	0	100	17,4
22.06.2008	2	0	100	50,4

Background Screening

	Name	Start value	End value	Dynamic	Measure units	Optimization method	Parent
	Background Screening	0,8	98,7	+ 97,9	%	Maximize	Authorized Processing

Description Percentage of employees (users) in high-level access positions screened prior to granting access

Graph for Background Screening

Data for Background Screening

Dates	Weight	Min	Max	Value
04.05.2008	2	0	100	0,8
11.05.2008	2	0	100	70,1
18.05.2008	2	0	100	80,6
25.05.2008	2	0	100	61,2
01.06.2008	2	0	100	74,9
08.06.2008	2	0	100	68,4
15.06.2008	2	0	100	50,1
22.06.2008	2	0	100	98,7

Data Integrity

Name

Start value

End value

Dynamic

Parent

Contains

Data Integrity

37,45 %

25,11 %

-12,34%

Data Leakage Prevention

Indicators

Virus Scans

Password Verification

Unique User IDs

Logical Controls *

* - Information for this metric is limited in sample report Description This indicator provides measures to ensure that data maintains its original form and the system functions properly

Graph for Data Integrity

Data for Data Integrity

Dates	Value	Weight
04.05.2008	37,45	3
11.05.2008	33,63	3
18.05.2008	65,32	3
25.05.2008	55,78	3
01.06.2008	25	3
08.06.2008	65,65	3
15.06.2008	35,56	3
22.06.2008	25,11	3

Virus Scans

	Name	Start value	End value	Dynamic	Measure units	Optimization method	Parent
	Virus Scans	15,3	43,9	+ 28,6	%	Maximize	Data Integrity

Description Percentage of systems installed with virus information updation and scanning softwares

Graph for Virus Scans

Data for Virus Scans

Dates	Weight	Min	Max	Value
04.05.2008	3	0	100	15,3
11.05.2008	3	0	100	21,4
18.05.2008	3	0	100	63,7
25.05.2008	3	0	100	71,1
01.06.2008	3	0	100	6,5
08.06.2008	3	0	100	89,6
15.06.2008	3	0	100	35,7
22.06.2008	3	0	100	43,9

Password Verification

	Name	Start value	End value	Dynamic	Measure units	Optimization method	Parent
	Password Verification	18,2	0	-18,2	%	Maximize	Data Integrity

Description Perecntage of systems that verify password to check compliance with the security policies

Graph for Password Verification

Data for Password Verification

Dates	Weight	Min	Max	Value
04.05.2008	3	0	100	18,2
11.05.2008	3	0	100	10,1
18.05.2008	3	0	100	65,9
25.05.2008	3	0	100	17,9
01.06.2008	3	0	100	20,3
08.06.2008	3	0	100	69,7
15.06.2008	3	0	100	44,7
22.06.2008	3	0	100	0

Unique User IDs

	Name	Start value	End value	Dynamic	Measure units	Optimization method	Parent
	Unique User IDs	98,5	12,8	-85,7	%	Maximize	Data Integrity

Description Percentage of unique user IDs to help trace actions to specific user

Graph for Unique User IDs

Data for Unique User IDs

Dates	Weight	Min	Max	Value
04.05.2008	2	0	100	98,5
11.05.2008	2	0	100	24,7
18.05.2008	2	0	100	72,1
25.05.2008	2	0	100	60,8
01.06.2008	2	0	100	28,2
08.06.2008	2	0	100	42,4
15.06.2008	2	0	100	10,2
22.06.2008	2	0	100	12,8

Created by: AKS-Labs
Report created with Balanced Scorecard Designer at 27.05.2008 14:15:35