Key incident response metrics

This section will look at several types of key IR metrics that can help organizations make effective IR decisions backed up with sufficient data and established KPIs. Please keep in mind that KPIs are measurable values that show the effectiveness of achieving business objectives, whereas metrics simply track the status of a specific business process. In other words, KPIs track whether you hit business objectives or targets, and metrics track processes.

We will group the metrics into three main categories: prevalence, effectiveness, and time metrics.

Prevalence metrics

Prevalence IR metrics are important aspects of the IR process that might help organizations in improving their overall results in response efforts, or just allow them to keep track of IR-related activities for other purposes, such as decision making and budgeting. They pertain to the volume of certain indicators or issues, which can highlight strengths or areas to improve...