Rapid7 outlines key performance indicators security teams can use to measure operational maturity, establish targets, identify trends, and justify corrective action or additional resources. Recommended metrics include the number and disposition of incidents, incidents detected versus reported, mean time to detect, acknowledge, respond, and remediate, as well as cost per incident and the number of tools required for detection and response. The sheet also discusses the 1/10/60 benchmark of one minute to detect, 10 minutes to acknowledge, and 60 minutes to investigate. Employee turnover and mean time between failures can provide additional insight into staffing and operational health. Rapid7 emphasizes choosing KPIs tied to areas the business can realistically improve with available time, fun

Join for free to read