How to Measure Risk Management Performance: KPI & Metrics

This article explains the importance of measuring cyber risk management performance, outlines four common challenges in collecting meaningful metrics, and recommends five key metrics to track (number of risks identified, number of risks that occurred, percentage of risks monitored, percentage of risks mitigated, and cost of risk management programs); it also promotes SecurityScorecard for continuous monitoring and scoring.