New to IT Security: How Do I Identify Key Metrics for My Security Dashboard?

Hello, I am a student from Germany presently working on my master's thesis on the topic of security Dashboards. I am new to the IT Security field. I understand that my question may not be directly related to this forum. If anyone knows a better place to search, kindly guide me.

I am currently focusing on scanner information and aiming to incorporate security metrics, KPIs, and risk management issues into my dashboard. Can anyone help me with identifying relevant metrics? I understand these metrics will need to be customized for internal use, but there may be some general metrics to start with.

I would appreciate any assistance on how to proceed with this topic and where to find useful information. I hope I have framed the question correctly.

Thanks and Regards, Darshan

Hi,

Well, we scan the systems with the scanners to check for vulnerabilities and other security issues. It consists of both physical and computer components, as well as the internet (to check firewalls and such). The updates to be installed, patch information, vulnerability information. I know it's not that difficult to construct the dashboard for the available information. Still, I am facing a problem with what kind of KPI to use, as the information from the scanners is extensive, and not all data will be used for the analysis.

Thanks and Regards,
Darshan

My main problem is when we scan the systems, we get a huge amount of information, and they also show detailed reports of the scanned information. The existing dashboard displays this information once again in a web-based application with little revision of the scanned information.

However, I was a little confused by the vast amount of information displayed on the dashboard since the main purpose of the dashboard is to provide a weighted overview of the information. I want to review the existing dashboard with only the required information, rather than showing all the information.

The dashboard I want to design should display information that can be used for analysis and to provide an overview of the whole result, not to simply reproduce the same results scanned earlier. I hope I have made myself clear.

Kindly reply with how I can solve this problem.

Thanks and regards,
Darshan