Measuring risk and resilience: How to define, deliver, and report on cybersecurity KPIs

In almost all modern organisations, every executive, business leader, and team member measures – and is measured by – key performance indicators (KPIs). They are one of the most important ways for us to track our progress in achieving vital business goals as diverse as inventory turns, customer retention rates – and cybersecurity.

If an organisation’s cybersecurity KPIs are trending in the wrong direction, the negative implications are potentially massive. But at the same time, cybersecurity KPIs can also point to opportunity, progress, and the achievement of important business outcomes. In both cases, KPIs must help to indicate whether an organisation is resilient and whether its ability to conduct unfettered business activities around the clock is supported.

In this new guide, we’ve assembled a lineup of experienced and innovative leaders to share ideas and recommendations designed to help you identify both risk and opportunity, and to take the necessary steps to use cybersecurity KPIs to your advantage. Core themes such as cyber resilience, hyperaccurate predictability, and real-time response are explored in these chapters. The authors represent a mix of industries, locations, and organisations that’s diverse enough to include a medical and security services company, a manufacturer of products for the construction and infrastructure industries, and the world’s most important geopolitical body.