Metric Inventory Sheet
It is critical that the metrics you measure are defined and inventoried. In addition, this data is used in the PowerBI Template. The metric inventory sheet has the following columns for each metric:
Metric ID
A unique identifier for the metric.
M-01
Active
Yes/No indicating if the metric is actively part of the metrics program. Setting this to "No" hides the metric from most views.
Yes
Date Added
This is the date the metric was added to the inventory
08/26/2025
Date Last Updated
This is the date of the most recent update to the metric in the metric inventory. This is not the last time a measurement was recorded in the log.
08/31/2025
Type
This is the type of metric, aligned to the NIST 800-55 guidance. Options are "Implementation", "Efficiency", "Effectiveness", or "Impact"
Implementation
Metric Title
The title of the metric in a human-readable format. It's recommended this field is a full metric statement.
Percent of workstations covered by endpoint detection and response (EDR)
Group
The group the metric belongs to. This can be any string, and can be used to group metrics in various views.
Endpoint Security
Purpose
This is the purpose of the metric.
Implementation of EDR
Calculation
This is the calculation to derive the metric.
Number of workstations covered by EDR / Total workstations
Target
The target for the metric. Ensure you do not format this field. Use decimal format for percentages.
0.95
Measurement Frequency (Days)
The frequency or cadence, in days, measurements are taken.
14
Owner
The owner of the metric.
Mitchell Telatnik
Data Source(s)
The data source(s) the metric is calculated from
CrowdStrike, CMDB
Format
The format of the metric. Options include "Percentage", "Numeric", or "Currency"
Percentage
Direction
Indicates if a higher or lower value is better.
Higher
Retirement Date
The date the metric was retired from the metrics program.
02/15/2026
Retirement Reason
The reason the metric was retired from the metrics program.
Not driving actionable value
Adding Metrics
When adding a new metric, create a new row in the Metric Inventory Sheet. Some items to keep in mind include:
Ensure the metric has a unique Metric ID. It's recommended, but not required to use a consistent schema, such as "M-XX".
If you don't want the metric to appear in the report yet (no measurements, etc) set "Active" to no.
Ensure the target field is unformatted. Percentages should be in decimal format.
Ensure you set the correct format of the metric.
Ensure you set the correct direction.
A metric can only be assigned to one group.
Guidance on metric types (Implementation, Efficiency, Effectiveness, Impact) can be found in NIST SP 800-55.
Once a metric is added to the Metric Inventory Sheet, it will be pulled into the PowerBI Report upon refresh. If Active is set to "true", the metric will appear in the Metrics Matrix, Metric Inventory, as well as be configurable on cards. If Active is set to "false" the metric will only appear in Metric Inventory.
Once measurements are added to the Log Sheet, data will appear for the metric in the PowerBI report.
Retiring Metrics
While a key tenant of a successful metrics program is measuring the same metric over time, there will be times that metrics need to be retired from the program. Reasons can vary, but some common reasons include:
Change in Security Program's goals and objectives
Metric is no longer useful
Level of effort to calculate is too high
Superseeded by a new metric
In order to keep a record of historical metrics, instead of deleting the metric you can retire it. To retire a metric, set Active to "No", enter a date for the field "Retirement Date" and a reason for the field "Retirement Reason".
Upon refresh, the metric will no longer appear in the Metrics Matrix. Cards that were configured for the metric will need to be deleted or reconfigured for another metric. The metric will remain visible in the Metrics Inventory.
Last updated