KPI Scorecard
12 key performance indicators across 4 categories with industry benchmarks, trend tracking, and automated scoring against targets.
The KPI Scorecard tracks 12 operational security metrics across 4 categories. Each KPI is scored against industry benchmarks and tracked over time to measure operational improvement.
Categories and KPIs
Detection & Response
| KPI | Unit | Description | |---|---|---| | Mean Time to Detect (MTTD) | Hours | Average time from threat occurrence to detection | | Mean Time to Respond (MTTR) | Hours | Average time from detection to initial response | | Mean Time to Contain (MTTC) | Hours | Average time from detection to containment |
Operational Effectiveness
| KPI | Unit | Description | |---|---|---| | Incident Resolution Rate | Percentage | Percentage of incidents resolved within SLA | | Escalation Rate | Percentage | Percentage of incidents requiring escalation beyond L1 | | Phishing Click Rate | Percentage | Employee click rate on simulated phishing campaigns |
Compliance & Training
| KPI | Unit | Description | |---|---|---| | Training Completion Rate | Percentage | Staff completing required security awareness training | | Reported Incidents Count | Count | Number of incidents reported by employees | | Policy Compliance Rate | Percentage | Adherence to security policy requirements |
Business Continuity
| KPI | Unit | Description | |---|---|---| | Risk Mitigation Coverage | Percentage | Identified risks with active mitigation plans | | Backup Success Rate | Percentage | Successful completion rate of scheduled backups | | RTO Achievement Rate | Percentage | Recovery operations meeting target RTO |
Benchmark Scoring
Each KPI value is scored against industry benchmarks using a three-tier system:
- Green — At or better than the industry benchmark
- Yellow — Within acceptable variance of the benchmark
- Red — Below the acceptable threshold
Benchmarks are segmented by industry vertical and organization size to ensure fair comparison.
Data Entry
KPI values can be entered manually through the Ops Portal or ingested via API. Each entry is timestamped and associated with a snapshot period (monthly or quarterly).
Scorecard Snapshots
Snapshots capture the full KPI state at a point in time. They feed into trend analysis and are included in executive reporting deliverables. The scorecard history view shows improvement trajectories across all 12 metrics.
Integration with Readiness Scoring
KPI data influences the overall readiness score. Strong operational metrics (low MTTD, high training completion) contribute positively to the Preparedness dimension of the readiness model, while weak metrics reduce it.