Peer-Driven Insights

KPIs, Metrics & Reporting

About this topic

KPIs, metrics, and reporting refers to the use of key indicators and analytics to measure, monitor, and communicate progress toward business goals. They enable data-driven decision-making and performance improvement.

Featured One-Minute Insights

Sept 2024

How are U.S. CISOs Addressing Liability Risk?

New regulations taking effect in the U.S. mean that cybersecurity leaders could face legal liability in the event of an incident. What strategies are they using to protect themselves?
How are U.S. CISOs Addressing Liability Risk?

Active Ambassadors in This Topic

Rathik Pathak

Rathik Pathak

JM Financial Services Ltd

Travel and Hospitality, 1k - 5k

India
J

Jeff Bower

HUSCH BLACKWELL LLP

Services (non-Government), 1k - 5k

United States
View All Community Ambassadors

Community Posts

point in time security assessments or security performance management that is more continuous / automated - which do you prefer ?  Check out this paper by Ed Amoroso - retired ATT Chief Security Officer - founder of TAG Cyber 
https://www.tag-cyber.com/analysis/white-papers/requirements-for-security-performance-management

I plan to rely on static annual external assessments of security to judge effectiveness71%

I plan to look at security performance management capabilities to assess continuously my security effectiveness28%

Performance management systems and metrics should be reviewed and changed regularly.

Strongly agree5%

Agree62%

Neutral17%

Disagree3%

Strongly disagree10%

Unsure

View Results

Should IT report to the CFO?  What are the advantages and disadvantages?

Read More Comments

Where can I locate licensing/subscription expense for Cloud based ERP Vendors like Oracle, Workday and Infor? Where did you acquire this information or How did you acquire this data?  Looking for data on Finance, HCM and SCM Modules for a Hospital with 3,600 employees. 

Why do you need to use metrics to track diversity, equity and inclusion (DEI) initiatives?

Why do you think OKRs and KPIs are commonly confused?

Have you abandoned a enterprise search project within the past year? If yes, comment why

Yes (comment, Why?)47%

No53%

Without disclosing any specific vendor names - What was the most egregious experience you've had with a software vendor that still makes you wonder, “Did that really happen? Did they truly do that?”

Read More Comments

How do you measure the success of self-service BI dashboards?

Read More Comments

How do you know when it's time to reassess your IT strategy?

Read More Comments

Have your KPIs for your team changed with remote working? Are you enhancing / or altering the way you're tracking productivity? How (any good tools)?

Read More Comments

Can CIOs act as the CDOs for organizations today? Or do companies really need a separate CDO who can partner with the business and IT to drive digital transformation?

Read More Comments

We recently moved from Tenable to Rapid7 Insight VM for vulnerability management. We've struggled with carrying over our existing metrics as reporting on fixed vulnerabilities is difficult. How are other InsightVM customers handling KRI/KPI reporting?

How should you respond when asked to white-wash a security risk?  How does the CISO protect themselves from unfairly taking the blame and being held liable?

Read More Comments

As the CISO, how do you get others in the business to take ownership of some of the risk, rather than assuming all the risk yourself?

Read More Comments

Have you ever been asked to white-wash a security risk?

Read More Comments