How to Measure Cybersecurity Effectiveness: KPIs, KRIs, and Business Impact

https://is1-ssl.mzstatic.com/image/thumb/Podcasts116/v4/2f/d0/65/2fd065cb-5a07-ed13-2bef-5f20237835d8/mza_16436592847458646362.jpg/600x600bb.jpg

The ITSM Practice: Elevating ITSM and IT Security Knowledge

Luigi Ferri

121 episodes

1 week ago

Join Luigi Ferri, an experienced ITSM & IT Security Professional, in 'The ITSM Practice.' Explore IT Service Management and IT Security, uncovering innovations and best practices with insights from leading organizations like Volkswagen Financial Services, Vodafone, and more. Each episode offers practical guides and expert discussions for learning and growth. Ideal for all ITSM and IT Security Professionals! Stay Connected: LinkedIn: https://www.linkedin.com/in/theitsmpractice/ Youtube: https://www.youtube.com/@theitsmpractice Website: http://www.theitsmpractice.com

Technology

RSS

All content for The ITSM Practice: Elevating ITSM and IT Security Knowledge is the property of Luigi Ferri and is served directly from their servers with no modification, redirects, or rehosting. The podcast is not affiliated with or endorsed by Podjoint in any way.

Technology

https://d3t3ozftmdmh3i.cloudfront.net/staging/podcast_uploaded_nologo/39791737/39791737-1703369682997-6c8aee26bd3b2.jpg

How to Measure Cybersecurity Effectiveness: KPIs, KRIs, and Business Impact

The ITSM Practice: Elevating ITSM and IT Security Knowledge

9 minutes 44 seconds

2 months ago

How to Measure Cybersecurity Effectiveness: KPIs, KRIs, and Business Impact

Struggling to prove the value of your cybersecurity efforts? In this episode of The ITSM Practice, Luigi Ferri shows how to turn cybersecurity metrics into business assets. Learn why measuring outcomes—not just activities—can elevate security from cost center to competitive advantage.

In this episode, we answer to:

What should you measure to show cybersecurity effectiveness in business terms?

How do ISO 27001 and NIST CSF influence security KPIs and KRIs?

How can vendor risk be quantified using security ratings?

Resources Mentioned in this Episode:

Safe website, article "Aligning IT and Cybersecurity: The Missing Piece in Business Alignment", link https://safe.security/resources/blog/aligning-it-cybersecurity/

Microsoft Security website, article "Overview of critical asset management", link https://learn.microsoft.com/en-us/security-exposure-management/critical-asset-management

Bitsight website, article "Third-Party Cyber Risk Assessments", link https://www.bitsight.com/glossary/third-party-cyber-risk-assessment

ISMS.online website, article "How to Track ISO 27001 Milestones and Measure Success", link https://www.isms.online/iso-27001/how-to-track-iso-27001-milestones-and-measure-success/

ISACA Germany website, guideline "KPI Guide 2024", link https://www.isaca.de/images/Publikationen/Leitfaden/ISACA_KPI_Guide_2024.pdf

HighTable website, article "ISO 27001 Monitoring, Measurement, Analysis, Evaluation: Clause 9.1", link https://hightable.io/iso-27001-clause-9-1-monitoring-measurement-analysis-evaluation-essential-guide/

Rikkeisoft website, article "Data-Driven Security: Transforming Protection Through Analytics", link https://rikkeisoft.com/th/blog-th/data-driven-security-transforming-protection-through-analytics/

Connect with me on:

LinkedIn: https://www.linkedin.com/in/theitsmpractice/

Website: http://www.theitsmpractice.com

And if you want more tips and guidance, follow me on LinkedIn. I am sharing daily posts regarding Enterprise Service Management, IT Service Management, and IT Security.

Credits:

Sound engineering by Alan Southgate - http://alsouthgate.co.uk/

Graphics by Yulia Kolodyazhnaya