Bright Ideas Roundtable: Tracking Performance Metrics for Building Cyber Resilient Systems Using NIST CSF and More

Present a framework for defining performance metrics, a concept for using them, and how they aid in developing cyber resilient systems. The framework construct includes goals, objectives, implementation approaches, and design principles. Organizations can select and apply the constructs to the threat environments for which system performance metrics must be measured.

With increasing and more sophisticated cyber threats, understanding that a successful cyberattack might occur at any moment, organizations need to focus on resilience as much as prevention through a robust cybersecurity program. Generally, critical cybersecurity metrics are focused on risk management, GRC and cyber operations. The framework for defining performance metrics helps to think beyond everyday cyber operations and define how well systems are performing against performance targets, and truly help implementing cyber resiliency in the system life cycle.