ISAUnited, is surveying to gain insights into how organizations are analyzing and measuring the effectiveness of their enterprise security architecture. The survey aims to understand the methods, tools, and key performance indicators (KPIs) that security architecture practitioners use to evaluate and continuously improve their security posture across complex architectures.

​

In protecting an organization's information assets and systems from various cyber threats, merely implementing security controls is not enough; continuously evaluating and measuring the security architecture's effectiveness is essential. This is where Key Performance Indicators (KPIs) come into play. KPIs serve as a validity tool, providing quantitative and qualitative metrics to analyze and measure the performance, maturity, and alignment of the security architecture with the organization's business objectives and risk posture.