A financial services firm has been using the number of security incidents as a KPI for three years. The CISO observes that the incident count has remained stable, but the average cost per incident has increased significantly. What should the CISO do to improve the KPI set?

Keep the incident count KPI unchanged because it has been stable and is easy to track

Add a KPI that measures the financial impact of incidents, such as cost per incident or total cost of incidents

Replace the incident count KPI with a KPI measuring the number of security tools deployed

Reduce the target for incident count to force the team to focus on prevention

A global bank's CISO is tracking the percentage of security incidents that are detected within 1 hour. The data is collected from the SIEM and reported monthly. The CISO notices that the KPI has been consistently above 90% for the past year, but the number of incidents that escalate to major breaches has increased. What is the most likely issue with this KPI?

The KPI is being measured too frequently, causing alert fatigue

The SIEM is generating false positives, inflating the detection rate

The KPI is not aligned with the board's strategic objectives

The KPI measures detection speed but not the quality of detection or the effectiveness of response

Which action is appropriate when a KPI is no longer aligned with the organization's strategic objectives?

Increase the frequency of reporting to compensate for the misalignment

Remove the KPI from all reports without replacement

Revise or replace the KPI to reflect the new objectives

Continue using the KPI without changes to maintain consistency

A government agency's CISO must report on the effectiveness of the security program to the agency's leadership. The leadership is concerned about both the security posture and the efficient use of taxpayer funds. The CISO has data on the number of incidents, cost per incident, and total security spending. Which reporting approach would best address the leadership's concerns?

Present only the security outcome KPIs, such as number of incidents and time to respond

Present a balanced scorecard that includes both security outcome KPIs and financial efficiency KPIs, with trend analysis

Present a detailed technical report with all raw data for the leadership to analyze

Present only the financial KPIs, such as total spending and cost per incident

A CISO is designing a KPI dashboard for the board of directors. The board wants to see how well the security program is reducing organizational risk, not just operational activity. Which KPI would best meet this need?

Number of security awareness training sessions completed per quarter

Percentage of critical vulnerabilities remediated within the defined SLA

Average time to detect (MTTD) a security incident

Residual risk score for the organization's top five business processes

EC-CouncilCertified Chief Information Security Officer

Domain 5Objective 3

Key Performance Indicators (KPI) CCISO Practice Questions (Page 3)

Part of the Strategic Planning, Finance, Procurement, and Vendor Management domain, which makes up ~21% of our current practice bank. EC-Council does not publish an official question count, but from its 150-minute exam (~60–100 total, ~13–21 in this domain), expect 2–4 from this objective — we provide 44 practice questions to prepare you well beyond it. (estimate)

44questions here

9free pages

7concepts

Questions 11–15

11application · medium
A financial services firm has been using the number of security incidents as a KPI for three years. The CISO observes that the incident count has remained stable, but the average cost per incident has increased significantly. What should the CISO do to improve the KPI set?
Select an answer first
12expert · hard
A global bank's CISO is tracking the percentage of security incidents that are detected within 1 hour. The data is collected from the SIEM and reported monthly. The CISO notices that the KPI has been consistently above 90% for the past year, but the number of incidents that escalate to major breaches has increased. What is the most likely issue with this KPI?
Select an answer first
13foundation · easy
Which action is appropriate when a KPI is no longer aligned with the organization's strategic objectives?
Select an answer first
14expert · hard
A government agency's CISO must report on the effectiveness of the security program to the agency's leadership. The leadership is concerned about both the security posture and the efficient use of taxpayer funds. The CISO has data on the number of incidents, cost per incident, and total security spending. Which reporting approach would best address the leadership's concerns?
Select an answer first
15application · medium
A CISO is designing a KPI dashboard for the board of directors. The board wants to see how well the security program is reducing organizational risk, not just operational activity. Which KPI would best meet this need?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CCISO

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CCISO” is a trademark of its owner, used for identification only.

Key Performance Indicators (KPI) CCISO Practice Questions (Page 3)

Questions 11–15

A financial services firm has been using the number of security incidents as a KPI for three years. The CISO observes that the incident count has remained stable, but the average cost per incident has increased significantly. What should the CISO do to improve the KPI set?

Which action is appropriate when a KPI is no longer aligned with the organization's strategic objectives?

A CISO is designing a KPI dashboard for the board of directors. The board wants to see how well the security program is reducing organizational risk, not just operational activity. Which KPI would best meet this need?

Keep studying — Strategic Planning, Finance, Procurement, and Vendor Management