Tracking security metrics is a critical step in maintaining and improving security posture because not only do the metrics measure the effectiveness of your security practices but also help identify ways to mitigate risks and guide future risk prioritization.

Since these metrics inform key security decisions, it is important to ensure that the KPIs aren’t overly complex and that the data they analyze is reliable and easy to understand. Here are some examples of important security metrics:

• Intrusion attempts

• Security incidents

• Mean time to detect

• Mean time to resolve

• Mean time to contain

• Mean age of open vulnerabilities

The metrics you decide to track will be used to identify, track, and report on key performance indicators (KPIs). Therefore, it is critical to track metrics that are relevant to your organization from an operational and strategic perspective as well as ensure the efficacy of your metrics program.

The preparation phase involves creating a plan to respond to security incidents as quickly and efficiently as possible. The plan must identify the incident response team, define their role, and outline steps to be taken in the event of a security incident. The ultimate goal here is to eliminate doubt and hesitation and empower the security team to act swiftly and decisively.

More info: Office 365 Migration Services