ITIL Security management

% of internal hosts which are centrally managed & protected

% of obsolete user accounts

% of security-related service calls

Cost of security incidents

Number of incidents outside hours where security staff are present

Time lag between detection, reporting and acting upon security incidents