What are the top executive report KPIs for IT OPS and IT Cybersecurity?

1.5k views9 Upvotes2 Comments

Sort by:

VP of Global IT and Cybersecurity in Manufacturing4 years ago

IT
-Metrics/KPIs/SLAs (2021)
ServiceDesk Tickets (#)
Internal Customer Satisfaction (%)

-KPIs (2021)

Total IT Downtime/Outage (unplanned) (#)

Lost revenue due to outages ($)

Brand or reputation damage due to outages (#)

-Ongoing Project work, Issues list - (Green, Yellow or Red)

VP of Global IT and Cybersecurity in Manufacturing4 years ago

Cybersecurity
-Metrics/KPIs

A) Executive Level

Incident Costs ($)

Risk quantification and modeling ($)

Audit and certification non-conformities

B Security Posture Management

Adherence to framework controls (%)

External facing systems

Admin accounts over time

Devices running unsanctioned software (%)

Devices running unsupported operating systems (%)

Devices running unsupported business applications (%)

C) Security OPS/Incident Response

Number of unmanaged or unknown devices on the network

Analyst time spent per alert

Analyst time spent per incident

Analyst time spent per IT security ticket

Security Operations alerts

Mean time to recovery

D) Security Coverage

Systems protected with anti-malware (%)

Systems assessed for vulnerabilities (%)

Devices actively managed with MDM (%)

Users enrolled in Identity and Access Management

E) Vulnerability Management

Identified, patched vulnerabilities

Identified, unpatched vulnerabilities

Average vulnerabilities age

F) Cloud Security

Employees with admin or elevated permissions to cloud apps

Cloud security policy violations

Cloud assets misconfigured

Code repositories dependencies with security vulnerabilities

Content you might like

Is Vendor Management part of Procurement in your organization?

Yes, it's integrated together52%

No, VMO is separated43%

Other (comment below)4%

View Results

Anomaly Detection / Mindbridge: We’re exploring tools that support continuous monitoring of financial transactions (e.g., inventory adjustments, journal entries, credit memos, disbursements) to help us identify anomalies earlier than our traditional periodic audits allow. We are a $20B company with 50+ different ERP systems globally (some data is mastered). Our goal is to enhance fraud detection and internal controls using modern, AI/ML analytics tools. We've started a vendor assessment process and MindBridge seems to be the only vendor that fairly fits the bill. I'd appreciate if someone can share any feedback/experience on the solution/vendor.

Has anyone been successful in implementing a FinOps Cost Optimization policy to turn down idle cloud instances during off hours (nights/weekends)? DId you start with non-prod environments? How are you handling logging/monitoring alerts during that time?

Do you think that mobile spyware poses a threat to you, or your organization's enterprise data security?

Yes68%

No32%

Anyone using Hashicorp to drive privileged Access management PW compliance by any chance? if yes, any challenges pulling data from the solution and matching secrets to privileged IDs?