Re: Info Sec KPIs

[Joanna Grama <jgrama () EDUCAUSE EDU>]

Dear Robert,
We published some resources on information security metrics earlier in the year. The best place to see a listing of our 
information security metrics is in this blog post: https://er.educause.edu/blogs/2017/9/metrics-mania-review

The blog post itself contains some metrics; and there is a listing of additional resources at the end of the blog.

Kind regards,
Joanna


Joanna Grama, JD, CISSP, CRISC, CIPT
Director of Cybersecurity and IT GRC Programs

EDUCAUSE
Uncommon Thinking for the Common Good
282 Century Place, Suite 5000, Louisville, CO 80027
direct: 720.406.6769 | jgrama () educause edu<mailto:jgrama () educause edu>

Become a Member- Everyone at your organization is an EDUCAUSE member when you join | Access discounts, resources, and 
valuable peer networks | Discover membership<https://www.educause.edu/about/discover-membership>



From: The EDUCAUSE Security Constituent Group Listserv [mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Barton, 
Robert W.
Sent: Tuesday, December 19, 2017 5:48 PM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: [SECURITY] Info Sec KPIs

Afternoon,

What do people report for Info Sec KPIs?  How do you report them?  Are they available freely to the University, a 
sub-set, or just for your department?

Robert W. Barton
Director of Information Security
Lewis University
One University Parkway
Romeoville, IL  60446-2200
815-836-5663

This message (including any attachments) is intended only for the use of the individual or entity to which it is 
addressed and may contain information that is non-public, proprietary, privileged, confidential, and exempt from 
disclosure under applicable law or may constitute as attorney work product. If you are not the intended recipient, you 
are hereby notified that any use, dissemination, distribution, or copying of this communication is strictly prohibited. 
If you have received this communication in error, notify us immediately by telephone at (815)-836-5950 and (i) destroy 
this message if a facsimile or (ii) delete this message immediately if this is an electronic communication. Thank you.