Security Score Metrics

[mpipaliya_splun]

Starter content for the ask-question category for the upcoming app.

CISOs currently have difficulty demonstrating the value of the organization’s security program to other executives as well as board members.   Additionally, meaningful performance indicators do not exist to inform executive leadership and the board of the resilience of the organization’s security posture nor do indicators exist to provide focus on the "day-to-day" tasks that are a priority.

Does Splunk have Security Metrics App covering Network, Endpoint, and Vulnerability focused dashboards?

1. Mean time to Detect
2. Mean time to Investigate
3. Mean time to Respond
4. Trend of the Mean time to detect/respond/investigate
5. % of incidents detected within the organizations SLA's
6. % of incidents investigated within the organizations SLA's
7. % of incidents respond within the organizations SLA's
8. Trend of # 5,6, and 7
9. ES Notables last 24 hrs
10. Risk notables last 24 hrs
11. Trend of 9 and 10
12. ES notables abandoned last 24 hours
13. Risk notables abandoned last 24 hrs
14. Trend of 12 and 13

#splunk_security_metrics