A CISO is selecting KPIs for a new security operations center (SOC). The SOC's primary objective is to detect and respond to threats quickly. Which KPI is the most relevant and measurable for this objective?

Percentage of SOC staff with advanced certifications

Mean time to detect (MTTD) and mean time to respond (MTTR)

Number of security tools in the SOC

Total number of security alerts generated

A CISO must choose a set of KPIs for the security program. The organization has three strategic priorities: reducing cyber risk, optimizing security spending, and improving incident response. Which set of KPIs best covers all three priorities?

Number of security tools deployed, total security budget, and number of security staff

Percentage of employees trained, number of policies updated, and number of audits passed

Number of incidents detected, number of incidents escalated, and number of incidents closed

Number of vulnerabilities remediated, cost per incident, and mean time to respond

A regional bank's CISO wants to demonstrate the value of the security program to the board. The board cares about reducing business disruption and regulatory fines. Which KPI would be most relevant for this audience?

Average time to patch critical vulnerabilities

Number of security awareness training sessions completed

Total cost of security tools per employee

Downtime hours caused by security incidents

A CISO must report KPI results to two different audiences: the board of directors and the IT operations team. The board wants a high-level view of risk reduction, while IT operations wants detailed technical metrics to guide improvements. The CISO has limited time to prepare the reports. What is the most effective approach?

Present only the KPIs that are trending positively to both audiences

Send the same high-level summary to both audiences

Create two separate reports: a strategic summary for the board and a detailed technical report for IT operations

Send the same detailed technical report to both audiences

Why is it important to regularly review KPIs?

To ensure that the KPIs remain relevant and aligned with changing organizational priorities

To increase the number of KPIs tracked

To reduce the frequency of data collection

EC-CouncilAssociate C|CISO

Domain 5Objective 3

Key Performance Indicators (KPI) ACCISO Practice Questions (Page 3)

Part of the Strategic Planning, Finance, Procurement, and Vendor Management domain, which makes up ~23% of our current practice bank. EC-Council does not publish an official question count, but from its 120-minute exam (~50–80 total, ~12–18 in this domain), expect 2–3 from this objective — we provide 46 practice questions to prepare you well beyond it. (estimate)

46questions here

10free pages

8concepts

Questions 11–15

11application · medium
A CISO is selecting KPIs for a new security operations center (SOC). The SOC's primary objective is to detect and respond to threats quickly. Which KPI is the most relevant and measurable for this objective?
Select an answer first
12expert · hard
A CISO must choose a set of KPIs for the security program. The organization has three strategic priorities: reducing cyber risk, optimizing security spending, and improving incident response. Which set of KPIs best covers all three priorities?
Select an answer first
13application · medium
A regional bank's CISO wants to demonstrate the value of the security program to the board. The board cares about reducing business disruption and regulatory fines. Which KPI would be most relevant for this audience?
Select an answer first
14expert · hard
A CISO must report KPI results to two different audiences: the board of directors and the IT operations team. The board wants a high-level view of risk reduction, while IT operations wants detailed technical metrics to guide improvements. The CISO has limited time to prepare the reports. What is the most effective approach?
Select an answer first
15foundation · easy
Why is it important to regularly review KPIs?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to ACCISO

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “ACCISO” is a trademark of its owner, used for identification only.