Back to Security Audit and Monitoring

Security Metrics and Reporting

5 minutes 5 Questions

Security metrics and reporting involve the collection, analysis, and presentation of relevant security-related data to provide insights into an organization's security posture and the effectiveness of its security controls. Common security metrics include incident frequency, response times, vulnera…

Test mode:
Start practice test
CISSP - Security Metrics and Reporting Example Questions

Test your knowledge of Security Metrics and Reporting

Question 1

A company is using security event log monitoring to assess their IT infrastructure's security posture. They want to create an effective metric to measure the success of their security controls. What metric would be useful and relevant for this purpose?

Correct Answer: Percentage of investigated security events

Percentage of investigated security events is the most relevant metric as it measures the efficiency and effectiveness of identifying and analyzing security events detected in their event logs. The other options are not as directly related to measuring the success of their security controls.

Question 2

A healthcare organization has been targeted by a cyber attack. They have successfully thwarted the attack, but they must now assess the effectiveness of their security measures. They have decided to implement security metrics and reporting. Which of the following is the most effective metric for this organization?

Correct Answer: Incident response time

Incident response time is the most relevant metric for this organization as it can indicate the efficiency of their security measures in responding to security incidents, such as the recent cyber attack. The other options do not provide as much insight into the effectiveness of their security controls in a similar situation.

Question 3

An international bank has implemented a new online banking system. They want to create a primary security metric to measure and track account compromises resulting from unauthorized access. Which of the following metrics would be most fundamental and essential for their requirements?

Correct Answer: Total compromised accounts

The total number of compromised accounts is the most fundamental and essential metric for measuring the rate of account compromises due to unauthorized access. It provides a direct count of security breaches, allowing the bank to assess the severity of the issue and track changes over time. This metric serves as the basis for calculating other relevant ratios, such as the rate per 1,000 users, and is crucial for determining the overall security posture of the online banking system. By monitoring the total compromised accounts, the bank can quickly identify significant increases in security incidents, allocate resources for investigation and mitigation, and evaluate the effectiveness of their security measures. This metric is also easily measurable and doesn't rely on other data points, making it the most reliable and straightforward choice for assessing account security in the new online banking system.

More Security Metrics and Reporting questions
9 questions (total)
Start 9 question test