Skip to content

Metrics and Measurement

What is Metrics and Measurement?

The definition, collection, and analysis of quantitative data to evaluate performance, effectiveness, and compliance of programs and controls.

Governance

Frameworks that govern metrics and measurement

COBIT 2019View framework →ISO 27001:2022View framework →NIST Cybersecurity Framework 2.0View framework →

What the standards actually require on metrics and measurement

Requirements naming metrics and measurement across 2 standards, quoted from the control text.

NIST SP 800-1281 control

Define and collect SecCM metrics covering baseline adoption rate, change approval cycle time, drift volume, vulnerability remediation SLA, and unauthorized change incidents to drive continuous improvement.

SecCM-MONITOR-6 · Metrics and Measurement →
ISO/IEC TR 24028:20201 control

An AI system is any system, product or service that uses AI, whether implemented in software or largely in hardware such as robots; trustworthiness means being able to satisfy what stakeholders expect in a way that can be verified, applicable across AI systems...

iso-iec-tr-24028-2020::5.1 · Background →

Questions people ask about metrics and measurement

What is Metrics and Measurement?
The definition, collection, and analysis of quantitative data to evaluate performance, effectiveness, and compliance of programs and controls.
Why is Metrics and Measurement important for compliance?
Metrics and Measurement is a key concept in Governance. Understanding metrics and measurement helps organizations meet regulatory requirements, reduce risk, and demonstrate due diligence during audits. Our compliance platform maps 1,016 frameworks with 316K cross-framework control mappings.
Which compliance frameworks address Metrics and Measurement?
Metrics and Measurement appears in the requirement text of NIST SP 800-128, ISO/IEC TR 24028:2020. Across these standards we have identified 2 controls that name it directly, each linked to the control text on the compliance platform.
Where can I learn more about Metrics and Measurement?
Explore our compliance framework pages to see how metrics and measurement applies across different standards and regulations. Our implementation guides provide step-by-step guidance, and the compliance platform offers AI-powered analysis of how this concept maps across 1,016 frameworks.

See how Metrics and Measurement applies across compliance frameworks

Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.

Explore on Platform
Written and maintained by Gerard Blokdyk, The Art of Service.