KPI for Security and Compliance posted in category IT Security

WinningKPI - IT Security - KPI for Security and Compliance posted in category IT Security KPI Expert This indicator is for measuring of Security Risk; More details: Need to measure the effectiveness of security controls, intitial and residual risk; and regulatory compliance.

KPI Units: 25%

KPI Time Frame: update once a month

Posted by KPI Expert | Help to protect community: Flag for moderation

Useful KPI? Download KPI as a .BSC project or start a web-based KPI project.

Ideas suggested by WinningKPI community:

Here are comments:

According to your request I would suggest to design a Balanced Scorecard to manager your risks. In this case regulator compliance KPIs might be in "Customer" category, "Effectiveness of security controls" might appears in "Internal Business Processes".

The financial risk might be determined as financial_loss divided by probability and can be placed in Finance category.

Your measures to control risks might be included in "Education and growth" category.

Also, I do recommend to start with classical BSC approach, e.g. first define the strategy and only then start with KPIs and action. This article explains in details the approach: http://www.bscdesigner.com/get-the-big-picture-about-balanced-scorecard-its-connections-and-roles.htm

Alex Savkin | + | September 17, 2013 at 6:13 am

×

Have something to add? Have some more thoughts? Help others and earn 5 credits!

×

Sign in to comment Please, register (there is a button 'Become a member of WinningKPI community') in the right sidebar or sign in to leave comments. It is free and more - you will have scores for each comment you post.

Articles in IT Security category:

Relevant articles:

Become a member of WinningKPI community

Manage your KPIs with BSC Designer software

Random KPI requests: