ITIL Security management

6 KPIs

% of internal hosts which are centrally managed & protected

% of obsolete user accounts

% of security-related service calls

[number of security service calls] percentage of [number of service calls]

Cost of security incidents

Number of incidents outside hours where security staff are present

Time lag between detection, reporting and acting upon security incidents