Episode 22: KPIs vs. Empowerment

How effective is the use of Key Performance Indicators (KPIs) in security? Are they even relevant, and if so, do KPIs work differently for security teams than others?

In this episode, Robby chats with someone that’s had a lot to do with KPIs, both in his position as the former Head of the government CERT in Denmark (GovCERT), as well as a SOC Analyst for more than 10 years. Marc Andersen shares his experiences chasing KPIs, and discusses whether self-governance is a better alternative for security teams.

Technical level: 1/5

Host: Robby Peralta

Producer: Paul Jæger