| KPI ID # | (KPI) Indicator | Definition | Score | Trend | Red | Amber | Green | Owner |
| KPI ID-1 | Critical account password compliance percentage | Percentage of critical network accounts with a password age less than 6 months | 53 | | Less than 85% | 85-95% | 95-100% | Analyst 1 |
| KPI ID-2 | Percentage of Information Security projects on schedule | Information Security projects on schedule | 57 | | Less than 85% | 85-95% | 95-100% | Manager |
| KPI ID-4 | Percentage of systems missing no high severity software patches over 30 days old | Measures the number of systems in the environment that are current in high severity software patches. | 85 | | Less than 85% | 85-95% | 95-100% | Analsyt 2 |
| KPI ID-5 | Percentage of organizational units who have an up-to-date, tested and approved business continuity plan | Organizational units that have formal plans to continue operations in the event of a unplanned incident. | 6 | | Less than 85% | 85-95% | 95-100% | BC/DR |