Information security metrics can be obtained at different levels within an organization. Basic measurement data is typically collected at the system and network level, and can be subsequently analyzed and summed up at higher organizational levels. Security metrics may include data of different complexity. Good metrics should be specific, measurable, comparable, attainable, repeatable, time dependent, and goal-oriented. Complete metrics report should be based on a defined set of measurements, baselines, and other supporting information that provide context for interpreting the metrics.
Read Why do business professionals choose ready-to-use KPIs? to find out the answers to these questions:
Ideally, you need to have a strategy (in a form of a strategy map) before you start thinking about the ways to measure its execution (KPIs). Don't have a strategy map yet? Use free Strategy Map Wizard to create a strategy map for your current business challenges. The wizard will:
The whole process takes on average 6 minutes. Give it a try right now - it's free.
bonus.
Making the surroundings safe and secure is one of the top most priorities of both individuals and organizations. The way this issue is tackled however, differs in both the cases.
To talk about the security in organizational terms, 'information collection and preservation' is what the subject is concerned with. Often the IT (Information Technology) department is entrusted with the responsibility of taking care that only the relevant and useful information flows out of the 'legal outlets'.
Moving on, it is required that a 'quantitative eye' be kept on the procedures involved in this area.
This can be done by using metrics-studded BSC (Balanced Scorecard). These metrics are called KPIs (Key Performance Indicators) and are identified after carrying out enough detailed studies into the subject and decided for. The utility of these indicators lies in assigning values to these in the form of 'actual' and 'target' heads. These can be compared in later times to know if any deviation is taking place or not in case of 'security issue'. In case, any departure from the 'intended values' is occurring, one can correct these on timely basis and ensure that things are well within place.
This is the actual scorecard with Security and Privacy Measures and performance indicators. The performance indicators include: security and privacy scorecard, network service level, organizational impact of compromises, viruses detected.
Download a trial version of Security and Privacy Estimation Balanced Scoreboard or purchase a full version online.
How is this book different from 796 other book titles about KPIs on Amazon?
"Before writing a single line, I formulated some guiding principles, one of them was: "If our clients ask, "How can I find a good KPI for..." - I want this book to provide a perfect answer."
