Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

New metrics ideas can be introduced at any time.  Continuous improvement efforts seek to move prospective metrics to possible, and possible to operational, within the normal operations of the teams involved.

Metrics Quadrant

DMCA

Net-Security,

Stopit

Info-Protect

Client Satisfaction or
Programmatic Outcomes

Type of Risk Exposure averted

Type of Risk Exposure averted
Did our involvement help?

Type of Risk Exposure Averted
Did our involvement help?

# of days since a major spill?

Resource Utilization
... of Team Services
(market penetration)
(utilization of the team by MIT)
(client uptake)
(event demographics)

DMCA tickets per time


Net-Security tickets per time

StopIT tickets per time

# of info-protect incidents per time?
types of exposure (SSN, credit card #s, accounts and passwords, etc.)
size of exposures (n of records, etc.)

Ratio of finding types (no breach, breach + notification, etc.)ratio of Attack types (malware, password sniffer, bank account sniffer, social engineering, etc.)

Resource Utilization
... of Tools and Resources

Ratio of Incidents to agents?

Ratio of Incidents to agents?

Ratio of Incidents to agents?

Level of effort per incident?

Process Performance

Avg Backlog
Avg Time to Resolve

Avg Backlog
Avg Time to Resolve

Avg Backlog
Avg Time to Resolve

Backlog?
Avg Time to Resolve?

Finances


 

 

 

Definitions and Means of Production

...