Monthly
Mean Time to Detect Threats
The average time between an attack or breach starting and the security team detecting it.
Hours
Cybersecurity
Cybersecurity KPIs: mean time to detect and respond, patch latency, phishing click rate, vulnerability backlog, MFA coverage and incidents.
Starter dashboardThe 6 KPIs most teams in Cybersecurity track, each in its best chart
Monthly
Mean Time to Respond
The average time from detecting a security incident to containing it.
Hours
Monthly
Security Incidents
The number of confirmed security incidents in a period, by severity.
Number
Weekly
Time to Patch Critical Vulnerabilities
How long critical vulnerabilities stay open from discovery (or patch release) to fix.
Days
Weekly
Open Critical Vulnerabilities
The number of open critical and high vulnerabilities, often with how many are past their deadline.
Number
Monthly
Phishing Simulation Click Rate
The share of staff who clicked a link in a simulated phishing email.
Percent
Monthly
Phishing Report Rate
The share of staff who reported a simulated phishing email to security.
Percent
Weekly
MFA Coverage
The share of user accounts (and admin accounts) protected by multi-factor authentication.
Percent
Monthly
Privileged Accounts
The number of accounts with administrator rights, often per 100 employees.
Number
Daily
Endpoint Protection Coverage
The share of devices with an active, up-to-date endpoint detection agent.
Percent
Monthly
Security Training Completion
The share of staff who completed required security awareness training on time.
Percent
Weekly
Alert False Positive Rate
The share of security alerts that turned out to be harmless.
Percent
Quarterly
Vendors Assessed for Security
The share of critical vendors with a current security assessment.
Percent