Measuring of % of Systems not to policy patch level

WinningKPI - IT Security - KPI for Measuring of % of Systems not to policy patch level posted in category IT Security

KPI details:

This indicator is for measuring the systems that are not up to the policy patch level of the company, as a % of all systems. This is calculated by dividing the total number of systems below policy patch level by the total number of systems.

A high % of this KPI resembles a low IT security level, and may be able to explain how other security KPIs have had negative scores.

However. bringing all systems to policy patch level may incur a high cost for the company, hence this should be strategically planned and budgeted for, in order to maximize security whilst keeping costs down.

Sometimes maintaining policy patch levels could also be influenced by security staff training and expertise. Ensuring the security personnel have maximum expertise is fundamental in levelling the security vs. cost ratio.

Formula:

Total numbers of systems below policy patch level/ Total number of systems x 100

KPI Unit: %

KPI Time Frame: update monthly

Posted by Oana Boteanu | Help to protect community: Flag for moderation

Ideas suggested by WinningKPI community:

Here are comments:

Keeping all systems up to policy patch level is a fundamental part of a high IT security level.
A company is measuring this in order to take necessary action to maximise this KPI and minimise potential security threats.

Example:

Formula:
Total numbers of systems below policy patch level/ Total number of systems x 100

Total number of systems: 400
Total number of systems below policy level: 100

% of systems not to policy patch level:
100/400 x 100 = 25 %

25 % of all systems are below policy patch level
Oana Boteanu | September 13, 2012 at 10:19 am

Have something to add? Have some more thoughts? Help others and earn 5 credits!

Sign in to comment Please, register (there is a button 'Become a member of WinningKPI community') in the right sidebar or sign in to leave comments. It is free and more - you will have scores for each comment you post.

Articles in IT Security category:

Tips on using IT Security Key Performance Indicators (KPIs)

Relevant articles:

Become a member of WinningKPI community

Manage your KPIs with BSC Designer software

Random KPI requests:

KPI for: Measuring of % of Employees that Have Been Nominated For or Received Performance Rewards -- This indicator is for measuring the numb... 1 comment - add ideas!
KPI for: Measuring of Resolution time -- This indicator is for measuring of resol... 1 comment - add ideas!
KPI for: Measuring of Customer Loyalty -- This indicator is for measuring customer... 1 comment - add ideas!
KPI for: Measuring of factory production performance and manufacturing problem solving -- This indicator is for measuring of produ... 1 comment - add ideas!
KPI for: Measuring of % of Hours Used for Fixing Bugs (in relation to the development effort) -- Details: This indicator is for measurin... 1 comment - add ideas!