Key Performance Indicators (KPI) ACCISO Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   What is the primary purpose of a Key Performance Indicator (KPI) in an organization?

   • ATo offer a quantifiable measure that tracks progress toward a specific strategic or operational objective
   • BTo provide a qualitative description of an organization's mission and vision
   • CTo serve as a one-time assessment of a project's final outcome
   • DTo replace the need for regular financial audits and compliance reviews
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   How should KPI results be presented in reports to stakeholders?

   • AIn a highly technical format that only data scientists can understand
   • BIn a clear and concise manner that highlights key findings and trends
   • COnly as raw data without any interpretation
   • DIn a way that hides negative results to avoid concern
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   An organization's KPI for 'percentage of critical vulnerabilities remediated within 30 days' has been at 98% for six months. The CISO is considering whether to update the KPI. The organization has recently adopted a new threat intelligence feed that identifies emerging threats faster. What should the CISO do?

   • AChange the KPI to measure the number of vulnerabilities discovered per month
   • BShorten the remediation window to 14 days to reflect the faster threat intelligence
   • CKeep the KPI unchanged because it is consistently met
   • DRemove the KPI entirely because it is no longer useful
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A financial services firm is developing a KPI to measure the effectiveness of its incident response process. The CISO wants the KPI to be measurable with existing data and aligned with the firm's objective of minimizing financial loss from breaches. Which KPI development step should the CISO perform first?

   • ASelect a target value for the KPI, such as 95% of incidents contained within 24 hours
   • BIdentify the data sources for measuring the KPI
   • CCreate a dashboard to report the KPI to stakeholders
   • DDefine the strategic objective, such as minimizing financial loss from breaches
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A retail company's CISO wants to present a balanced view of the security program's performance to the board. The board is interested in both the financial efficiency of the program and its operational effectiveness. Which combination of KPIs would provide the most balanced view?

   • ANumber of security tools deployed and total IT budget
   • BPercentage of employees trained and number of security policies updated
   • CNumber of vulnerabilities discovered and number of vulnerabilities patched
   • DCost per security incident and percentage of incidents resolved within SLA
   Reveal Solution Discussion Select an answer first