Back to CISSP

Security Metrics

Measuring and reporting security effectiveness

Security metrics involves the measurement and reporting of security effectiveness and organizational risk. This subtopic covers the development and implementation of metrics to support security-related decision making, as well as the evaluation and reporting of security posture.

Concepts covered: Return on Security Investment (ROSI), Security Risk Assessments, Incident Response Capability, Risk Appetite Alignment, Vulnerability Identification and Management, Mean Time to Detect (MTTD), Mean Time to Respond (MTTR), Security Awareness Training Effectiveness, Cost of Cyber Incidents, Patch Management Maturity, Key Risk Indicators (KRIs)

Time: 5 minutes   Questions: 5

Test mode:
Start practice test
Go Premium

CISSP Preparation Package (2024)

  • 5693 Superior-grade CISSP practice questions.
  • Accelerated Mastery: Deep dive into critical topics to fast-track your mastery.
  • Unlock Effortless CISSP preparation: 5 full exams.
  • 100% Satisfaction Guaranteed: Full refund with no questions if unsatisfied.
  • Bonus: If you upgrade now you get upgraded access to all courses
  • Risk-Free Decision: Start with a 7-day free trial - get premium features at no cost!
More Security Metrics questions
186 questions (total)
Start 100 question test