Metrics tell you and your leadership whether the security program is working. A metric is any measured value, such as the number of open critical vulnerabilities. A key performance indicator (KPI) is a metric chosen because it reflects progress toward an important goal, usually with a target, such as the percentage of critical vulnerabilities fixed within the SLA. Good metrics lead to decisions; vanity metrics, such as the raw number of blocked connections, look impressive but change nothing.
Free account
Keep reading for free
Create a free StudyToCert account to read the rest of this lesson: 7 more sections, 7 key terms, a real-world example, an exam tip and self-check questions. Every lesson, lab and practice test is free with an account.