This is a IT Security Balanced Scorecard Report, it is one of reports that Balanced Scorecard Designer can generate for IT Security scorecard. With this software you can also design your own KPIs, Balanced Scorecards and metrics.


IT Security Scorecard

Report includes: 1 month(s) 49 day(s), from 05.04.2008 to 24.05.2008

  Name Start value End value Dynamic Contains
Root IT Security Scorecard 40,11 % 42,26 % + 2,15 %
Risk Management(67,2%, 13,82%Up)
Contingency Planning(42,3%, 8,68%Up)
System Life Cycle(56,1%, -6,86%Down)
Personnel Security(20,4%, -1,33%Down)
Data Integrity(19,7%, -13,94%Down)

Graph for IT Security Scorecard

Graph for IT Security Scorecard

Data for IT Security Scorecard

DatesValue
05.04.200840,11
12.04.200854,65
19.04.200849,53
26.04.200828,58
03.05.200836,64
10.05.200856,37
17.05.200854,77
24.05.200842,26

Risk Management

  Name Start value End value Dynamic Parent Contains
Root Risk Management 53,36 % 67,18 % + 13,82% IT Security Scorecard
Indicators
Security Plan
Security Controls

Graph for Risk Management

Graph for Risk Management

Data for Risk Management

DatesValueWeight
05.04.200853,363
12.04.200895,943
19.04.200818,423
26.04.200826,73
03.05.200836,63
10.05.200858,463
17.05.200841,33
24.05.200867,183

Security Plan

  Name Start value End value Dynamic Measure units Optimization method Parent
Root Security Plan 10,4 40,9 + 30,5 % Maximize Risk Management
Description Description: Security Plan metrics quantify the percentage of systems with approved system security plans and the percentage of current system security plans.

Measure: The percentage of systems with approved system security plans."

Graph for Security Plan

Graph for Security Plan

Data for Security Plan

DatesWeightMinMaxValue
05.04.20084010010,4
12.04.20084010094,8
19.04.2008401005,7
26.04.20084010017,1
03.05.20084010041,7
10.05.20084010047
17.05.20084010027,5
24.05.20084010040,9

Security Controls

  Name Start value End value Dynamic Measure units Optimization method Parent
Root Security Controls 82 84,7 + 2,7 % Maximize Risk Management
Description Description: Security Controls metrics determine the efficiency of closing significant system weaknesses by evaluating the existence, the timeliness and effectiveness of a process for implementing corrective actions.

Measure: The time required for implementing corrective actions"

Graph for Security Controls

Graph for Security Controls

Data for Security Controls

DatesWeightMinMaxValue
05.04.20086010082
12.04.20086010096,7
19.04.20086010026,9
26.04.20086010033,1
03.05.20086010033,2
10.05.20086010066,1
17.05.20086010050,5
24.05.20086010084,7

Contingency Planning

  Name Start value End value Dynamic Parent Contains
Root Contingency Planning 33,61 % 42,29 % + 8,68% IT Security Scorecard
Indicators
Backup Frequency
Incident Response Capability

Graph for Contingency Planning

Graph for Contingency Planning

Data for Contingency Planning

DatesValueWeight
05.04.200833,612
12.04.200833,112
19.04.200826,852
26.04.200830,672
03.05.200838,372
10.05.200842,382
17.05.200877,892
24.05.200842,292

Backup Frequency

  Name Start value End value Dynamic Measure units Optimization method Parent
Root Backup Frequency 10,3 32 + 21,7 % Maximize Contingency Planning
Description Description: Backup Frequency depends on changes frequency and data value

Measure: Backup frequency time period"

Graph for Backup Frequency

Graph for Backup Frequency

Data for Backup Frequency

DatesWeightMinMaxValue
05.04.20087010010,3
12.04.2008701005,3
19.04.2008701000
26.04.20087010033,1
03.05.20087010022,2
10.05.20087010039,8
17.05.20087010087,1
24.05.20087010032

Incident Response Capability

  Name Start value End value Dynamic Measure units Optimization method Parent
Root Incident Response Capability 88 66,3 -21,7 % Maximize Contingency Planning
Description Description: Incident Response Capability metrics quantify the percentage of agency components with incident handling and response capability and the number of incidents reported to FedCIRC, NIPC, and local law enforcement

Measure: The number of components with incident handling and response capability"

Graph for Incident Response Capability

Graph for Incident Response Capability

Data for Incident Response Capability

DatesWeightMinMaxValue
05.04.20083010088
12.04.20083010098
19.04.20083010089,5
26.04.20083010025
03.05.20083010076,1
10.05.20083010048,4
17.05.20083010056,4
24.05.20083010066,3

System Life Cycle

  Name Start value End value Dynamic Parent Contains
Root System Life Cycle 63 % 56,14 % -6,86% IT Security Scorecard
Indicators
OMB requirement
Audit Trails

Graph for System Life Cycle

Graph for System Life Cycle

Data for System Life Cycle

DatesValueWeight
05.04.2008631
12.04.200838,081
19.04.200849,221
26.04.200858,321
03.05.200860,141
10.05.200854,31
17.05.200828,761
24.05.200856,141

OMB requirement

  Name Start value End value Dynamic Measure units Optimization method Parent
Root OMB requirement 75,8 76,3 + 0,5 % Maximize System Life Cycle
Description The percentage of systems that are in compliance with the OMB requirement for integrating security costs into the system life cycle

Measure: Systems with integrating security costs"

Graph for OMB requirement

Graph for OMB requirement

Data for OMB requirement

DatesWeightMinMaxValue
05.04.20086010075,8
12.04.2008601001,4
19.04.20086010036,3
26.04.20086010055,2
03.05.20086010037,7
10.05.20086010055,7
17.05.20086010027
24.05.20086010076,3

Audit Trails

  Name Start value End value Dynamic Measure units Optimization method Parent
Root Audit Trails 43,8 25,9 -17,9 % Maximize System Life Cycle
Description Audit Trails metrics quantify the percentage of systems on which audit trails provide a trace of user actions

Measure: Systems on which audit trails provide a trace of user actions"

Graph for Audit Trails

Graph for Audit Trails

Data for Audit Trails

DatesWeightMinMaxValue
05.04.20084010043,8
12.04.20084010093,1
19.04.20084010068,6
26.04.20084010063
03.05.20084010093,8
10.05.20084010052,2
17.05.20084010031,4
24.05.20084010025,9

Personnel Security

  Name Start value End value Dynamic Parent Contains
Root Personnel Security 21,74 % 20,41 % -1,33% IT Security Scorecard
Indicators
Security Awareness
Authentication and Authorize Processing

Graph for Personnel Security

Graph for Personnel Security

Data for Personnel Security

DatesValueWeight
05.04.200821,742
12.04.200836,752
19.04.200877,22
26.04.200816,852
03.05.200839,022
10.05.200844,882
17.05.200845,392
24.05.200820,412

Security Awareness

  Name Start value End value Dynamic Measure units Optimization method Parent
Root Security Awareness 17,6 4,3 -13,3 % Maximize Personnel Security
Description Description: Security Awareness metrics concern with the percentage of employees with significant security responsibilities who have received specialized training.

Measure: Employees who have received specialized security training"

Graph for Security Awareness

Graph for Security Awareness

Data for Security Awareness

DatesWeightMinMaxValue
05.04.20087010017,6
12.04.20087010035,4
19.04.20087010068,8
26.04.20087010014,9
03.05.20087010050,3
10.05.20087010028,8
17.05.20087010036
24.05.2008701004,3

Authentication and Authorize Processing

  Name Start value End value Dynamic Measure units Optimization method Parent
Root Authentication and Authorize Processing 31,4 58 + 26,6 % Maximize Personnel Security
Description Description: Authentication and Authorize Processing measurements.

Measure: Non-public data that is accessible after authorization"

Graph for Authentication and Authorize Processing

Graph for Authentication and Authorize Processing

Data for Authentication and Authorize Processing

DatesWeightMinMaxValue
05.04.20083010031,4
12.04.20083010039,9
19.04.20083010096,8
26.04.20083010021,4
03.05.20083010012,7
10.05.20083010082,4
17.05.20083010067,3
24.05.20083010058

Data Integrity

  Name Start value End value Dynamic Parent Contains
Root Data Integrity 33,68 % 19,74 % -13,94% IT Security Scorecard
Indicators
Logical Access Controls
Anti-virus and spyware protection

Graph for Data Integrity

Graph for Data Integrity

Data for Data Integrity

DatesValueWeight
05.04.200833,682
12.04.200840,442
19.04.200891,362
26.04.200826,162
03.05.200820,862
10.05.200879,762
17.05.200874,222
24.05.200819,742

Logical Access Controls

  Name Start value End value Dynamic Measure units Optimization method Parent
Root Logical Access Controls 87,2 3,9 -83,3 % Maximize Data Integrity
Description Description: Logical Access Controls metrics concern with the number of users with access to security software that are not security administrators

Measure: The number of users with access to security software that are not security administrators"

Graph for Logical Access Controls

Graph for Logical Access Controls

Data for Logical Access Controls

DatesWeightMinMaxValue
05.04.20082010087,2
12.04.20082010063,4
19.04.20082010069,6
26.04.20082010034
03.05.20082010073,9
10.05.20082010052
17.05.20082010094,7
24.05.2008201003,9

Anti-virus and spyware protection

  Name Start value End value Dynamic Measure units Optimization method Parent
Root Anti-virus and spyware protection 20,3 23,7 + 3,4 % Maximize Data Integrity
Description Description: The number of systems protected with anti-virus, anti-spyware and firewall software

Graph for Anti-virus and spyware protection

Graph for Anti-virus and spyware protection

Data for Anti-virus and spyware protection

DatesWeightMinMaxValue
05.04.20088010020,3
12.04.20088010034,7
19.04.20088010096,8
26.04.20088010024,2
03.05.2008801007,6
10.05.20088010086,7
17.05.20088010069,1
24.05.20088010023,7
Created by: AKS-Labs
Report created with Balanced Scorecard Designer at 28.04.2008 23:53:09

Copyright © 2000-2008 AKS-Labs. All rights reserved.