Which method is commonly used to track a KPI over time?

Using a single data point from the most recent quarter

Conducting a one-time employee survey

Reviewing the KPI only when a problem occurs

Periodic data collection and trend analysis

A CISO is creating a balanced scorecard for the security program. Which set of KPIs best represents a balanced mix of financial, operational, and strategic categories?

Number of firewalls deployed, number of IDS alerts, and number of security staff

Mean time to detect, mean time to respond, and number of vulnerabilities

Total security budget, number of training sessions, and number of incidents

Cost per incident, patch compliance rate, and percentage of critical assets covered by risk assessments

What is the primary role of Key Performance Indicators (KPIs) in organizational performance measurement?

To replace the need for detailed financial reporting to stakeholders

To enable the organization to measure progress toward strategic goals and make data-driven decisions

To ensure that all employees follow the same operational procedures

To provide a historical record of all business transactions for auditing purposes

A university's CISO has implemented a KPI to measure the percentage of endpoints with up-to-date antivirus definitions. The data is collected from the endpoint management tool. The CISO wants to ensure the KPI is reliable and actionable. What is the most important factor to validate?

The KPI is automatically calculated by the endpoint management tool

The data collection method accurately captures all managed endpoints and excludes retired or duplicate devices

The KPI is compared to industry benchmarks

The KPI is reported to the board on a quarterly basis

EC-CouncilCertified Chief Information Security Officer

Domain 5Objective 3

Key Performance Indicators (KPI) CCISO Practice Questions (Page 4)

Part of the Strategic Planning, Finance, Procurement, and Vendor Management domain, which makes up ~21% of our current practice bank. EC-Council does not publish an official question count, but from its 150-minute exam (~60–100 total, ~13–21 in this domain), expect 2–4 from this objective — we provide 44 practice questions to prepare you well beyond it. (estimate)

44questions here

9free pages

7concepts

Questions 16–20

16foundation · easy
Which method is commonly used to track a KPI over time?
Select an answer first
17foundation · easy
Which of the following is an example of a financial KPI?
Select an answer first
18application · medium
A CISO is creating a balanced scorecard for the security program. Which set of KPIs best represents a balanced mix of financial, operational, and strategic categories?
Select an answer first
19foundation · easy
What is the primary role of Key Performance Indicators (KPIs) in organizational performance measurement?
Select an answer first
20application · medium
A university's CISO has implemented a KPI to measure the percentage of endpoints with up-to-date antivirus definitions. The data is collected from the endpoint management tool. The CISO wants to ensure the KPI is reliable and actionable. What is the most important factor to validate?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CCISO

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CCISO” is a trademark of its owner, used for identification only.