Risk IT Collect data

Completeness of event data against established standards

Completeness of historical data across IT risk

Degree of data support for reporting of trends and scenario analysis

Degree of visibility and recognition into threat landscape provided by data collection

Number of data items with identified contributing factors

Number of loss events with key characteristics not captured

Number of sources used for data collection

The degree of visibility and recognition into control state provided by data collection