{"id":19212,"date":"2022-12-08T16:00:00","date_gmt":"2022-12-08T15:00:00","guid":{"rendered":"https:\/\/www.riskinsight-wavestone.com\/?p=19212"},"modified":"2022-12-09T16:53:14","modified_gmt":"2022-12-09T15:53:14","slug":"turn-your-dashboard-into-a-real-management-asset-against-global-cyber-threats","status":"publish","type":"post","link":"https:\/\/www.riskinsight-wavestone.com\/en\/2022\/12\/turn-your-dashboard-into-a-real-management-asset-against-global-cyber-threats\/","title":{"rendered":"Turn your dashboard into a real management asset against global cyber threats"},"content":{"rendered":"\n

Dashboards are an essential tool for CISOs to measure<\/strong> and control<\/strong> risks<\/strong> in their scope, to steer their projects<\/strong> and to inform their management<\/strong> of the company\u2019s cyber health evolution. However, according to Wavestone\u2019s Cyber benchmark results from 2022, 47% of companies have insufficient indicators or dashboards. In practice, indicators provide only a simple overview on a perimeter, and offer limited insights on the achievement of the company’s strategic and operational goals. If the deviations are not correctly measured, it will be complicated to deploy relevant measures of improvement, necessary to define operational priorities as well as to gather more resources in areas that are the most at risk.<\/p>\n

Furthermore, it would be riskier to entrust on one’s dashboards without having the reassurance offered by the indicators\u2019 relevance and reliability. This can lead to serious loss, or even to some major incidents. The crash of the Eastern Airlines 401 in 1972 is a striking example: a simple burnt-out light bulb, that was used to indicate the correct deployment of the landing gear, mobilized the entire crew, who were unable to notice in time the alarm that indicated the plane\u2019s drastic decrease in altitude. The plane crashed a few minutes later.<\/p>\n

\u00a0<\/p>\n

How to reconsider your indicator\u2019s base to make your dashboards more efficient and reliable? <\/strong><\/h1>\n

\u00a0<\/p>\n

What are dashboards, KRI, KCI?<\/h1>\n

\u00a0<\/p>\n

The dashboard is a synthetic<\/strong> presentation<\/strong> tool. Highlights the key trends used to facilitate decision making. It is a federating tool used to improve governance efficiency and is designed for everyone (not only for the CISO). Therefore, we refer to dashboards in plural. Each instance is defined by a unique perimeter, where there are specified: the recipients and their stakes, the review frequency, the associated governance, the indicators, the calculating methods used and the source, etc.<\/p>\n

Constructing a well-defined dashboard will correctly address<\/strong> the business stakes<\/strong> of the dashboards\u2019 users. A three-level segmentation summarizes all the requirements in an organization:<\/p>\n

\u00a0<\/p>\n

\"\"<\/p>\n

\u00a0<\/p>\n

Figure 1: Typologies of cyber dashboards: uses and objectives<\/em><\/p>\n

\u00a0<\/p>\n

An indicator is a measurement that is collected, contextualized, and used to facilitate decision-making. It is implemented to answer a well-identified need<\/strong> by one or more departments. Depending on the purpose of the measurement, three types of indicators can be defined:<\/p>\n

    \n
  1. KPI<\/strong> (Key Performance Indicator<\/em>): measures the performance of a department, a team, or a strategic plan. They are linked to strategic objectives to measure the effectiveness (e.g., retention of cyber talent over the year).<\/em><\/li>\n
  2. KRI<\/strong> (Key Risk Indicator<\/em>): assesses an identified risk, quantifying its likelihood and\/or impact at a given time. They are essential for accepting or rejecting a risk, and for controlling it over time (e.g., number of compromised business identifiers – account takeover).<\/em><\/li>\n
  3. KCI\u00a0<\/strong>(Key Compliance Indicator)<\/em>: measures a compliance rate in relation to a standard (PSSI, NIST, etc.). It evaluates an organization\u2019s maturity regarding to the given standard at a specific time (e.g., % of policies updated within the last year).<\/em><\/li>\n<\/ol>\n

    \u00a0<\/p>\n

    How to make a dashboard efficient?<\/h1>\n

    \u00a0<\/p>\n

    An efficient dashboard will convey self-supporting messages to the recipients. To build it, one must meticulously construct reliable and high-performance indicators, as well as minimising their number. These are defined by making a compromise between:<\/p>\n

      \n
    • their relevance<\/strong> (processing purpose, i.e., the ability to trigger a discussion);<\/li>\n
    • their computational<\/strong> cost (collection time, interpretation time);<\/li>\n
    • their maintainability<\/strong> over time (sustainability of data sources).<\/li>\n<\/ul>\n

      \u00a0<\/p>\n

      Let us take an example to evaluate the effectiveness of the “security-by-design” measures, where, in this case, a relevant indicator could be: “rate of validation of the security report at the first iteration by project scope and criticality”<\/em><\/strong>. First, it is operationally viable (approval process provides simple data for interpretation (binary values)).<\/em> It is relevant (responding to a clearly identified issue),<\/em> can be easily calculated if the processes are well set up (characteristic depending on the quality of the feedback information)<\/em> and it is sustainable (the approval process guarantees reliable data over time). <\/em><\/p>\n

      \u00a0<\/p>\n

      A deficient indicator base can neglect one of the three criteria. This can be seen in the following field: one can often observe clusters of indicators<\/strong>, that are inherited by tradition without any real purpose or without responding to an outdated need; or indicators that require time-consuming gathering<\/strong> that creates frustration among teams. These discrepancies can be explained by a lack of long-term strategy and a lack of importance given to these indicators.<\/p>\n

      \u00a0<\/p>\n

      To rectify this, the existing system must be cleaned up and supplemented with performant indicators on a regular basis (methodology detailed in section 3.1) where <\/em>the management of indicators itself is just as important as the other issues<\/strong>. Therefore, it must be monitored by a dedicated sponsor within the CISO’s governance team and by dedicated monitoring indicators<\/strong> (% of indicators defined with an approved calculation method, % of indicators that are fully automated, etc.)<\/em>. This central governance helps in finding compromises and minimising the number of indicators: about ten per perimeter\/program is an order of magnitude that works well.<\/p>\n

      \u00a0<\/p>\n

      Increase team engagement to get more useable data?<\/h1>\n

      \u00a0<\/p>\n

      It is not new: getting people to accept change and integrate new tools is always a tricky subject, especially for CISOs. The complexity of the environment, lack of dialogue between cyber teams and business lines, unsuitable tools, useless or unanalysed collected data, etc., represents numerous reasons that can explain a team’s lack of commitment. To address this, there are two principal areas to focus on:<\/p>\n

        \n
      1. Engage your employees in the indicator’s life cycle;<\/li>\n
      2. Facilitating the report of indicators with automation to minimize the workload.<\/li>\n<\/ol>\n

        \u00a0<\/p>\n

        Engage employees throughout the indicator\u2019s life cycle<\/h2>\n

        \u00a0<\/p>\n

        Team’s organizational complexity and local engagement are the first challenges that need to be addressed before deploying a dashboard: information gathering requires a dialogue between lines of business that are not used to work together (such as finance, IT risk management, strategy, program management, etc.)<\/em>. Involving your operational teams on a long-term basis is vital for a more reliable<\/strong> gathering and reporting process of indicators. More specifically, it allows you to:<\/p>\n

          \n
        • Define more realistic<\/strong> indicators, unlocking operational sticking points (unavailable data, communication problems, etc.);<\/li>\n
        • Define and develop operational needs<\/strong> more precisely: it is necessary to arise teams\u2019 interest in the results of the project (i.e., ensure that their work has a tangible impact for them)<\/em>;<\/li>\n
        • Facilitate change management <\/strong>to get more reliable results overall, by understanding the purpose of the gathered indicators.<\/li>\n<\/ul>\n

          \u00a0<\/p>\n

          It is necessary to involve the employees from the beginning of the process, as well as maintaining the dynamic <\/strong>throughout the indicator\u2019s operational maintenance. Transversal workshops should be organized throughout the process below, which will help in defining the indicators or generating questions.<\/p>\n

          \u00a0<\/p>\n

          \"\"<\/p>\n

          \u00a0<\/p>\n

          Figure 2: Indicator life cycle and maintenance<\/em><\/p>\n

          \u00a0<\/p>\n

          Facilitate data gathering and reporting with automation and appropriate tools<\/h2>\n

          \u00a0<\/p>\n

          While manual collection provides flexibility to experiment and test new indicators, (semi-)automated collection increases the team productivity and provides more reliable data.<\/p>\n

          \"\"<\/p>\n

          It is not always profitable to automate everything<\/strong>, as it depends on the data nature, data volatility or data maintenance. One of the highlighted reasons can be because of the cost of automation (it takes a full year on average to automate gathering and reporting process). Therefore, scope of automation should be carefully determined.<\/p>\n

          To scale up and automate more indicators, the corporate data culture<\/strong> needs to be improved. To reduce the cost of automation, it is necessary to have organized, referenced, and standardised data. Four measures to achieve that are:<\/p>\n

            \n
          1. Define a corporate vision<\/strong> and objectives<\/strong> to control, reference and manage the data;<\/li>\n
          2. Define policies<\/strong> and rules<\/strong> supported by top management to regulate the use and standardisation of data;<\/li>\n
          3. Promote a data culture<\/strong> among business teams to reflect the way data is valued and used;<\/li>\n
          4. Equip ISS with tools<\/strong> to support the organization’s data policies and strategy (Master Data Management, Data catalogue, Data lineage, etc.).<\/li>\n<\/ol>\n

            \u00a0<\/p>\n

            To become data-driven, the blocking points does not require to be technological, but organizational<\/strong>, particularly in terms of skills and ability to accept changes.<\/p>\n

            As a result, automation makes data collection “more<\/strong> liveable<\/strong>” for employees and makes the indicator\u2019s feedback more reliable over time.<\/p>\n

            \u00a0<\/p>\n

            Talking to your executives: the value of limiting the number of indicators<\/h1>\n

            \u00a0<\/p>\n

            A well-constructed dashboard is an excellent way to address and involve the Executive Committee (COMEX), even though dashboards are under-exploited<\/strong> for their “marketing” side. In 2022, 25% of companies have never solicited their Executive Committee, and only 30% of the market involves them regularly.<\/p>\n

            The dashboard must be self-sufficient (i.e., must be understandable at first sight), able to carry impactful messages, since it is intended to be shared with as many people as possible. The Executive Committee solves problems, accepts, or rejects risks daily, monitors budgetary performance and operational efficiency, supervises of customer satisfaction and the company’s public image. To talk to the executive committee, the dashboard must bring out the necessary essentials<\/strong> required to respond specifically to the targeted issues. To do so, it is more useful to highlight specific methods and solutions rather than explaining in-depth, the causes of the technical problem (unless the need is clearly expressed).<\/p>\n

            The purpose of presenting to management the \u201cratio of cyber FTEs over IT FTEs per entity\u201d<\/em><\/strong> or the \u201cratio of cyber budget over IT budget\u201d <\/em><\/strong>(that can be two viable approaches) is to inform and make decisions on cybersecurity resources.<\/p>\n

            In short, the choice of indicators and their format must be adapted to the COMEX. To do so, they must:<\/p>\n

              \n
            • Be focused on potential business<\/strong> impacts<\/strong>;<\/li>\n
            • Be consistent over time to have a stable indicator base<\/strong> and facilitate appropriation and understanding;<\/li>\n
            • Have a self-supporting form<\/strong> to visualize the evolution of a trend and its deviation from the set target.<\/li>\n<\/ul>\n

              \u00a0<\/p>\n

              Conclusion<\/h1>\n

              \u00a0<\/p>\n

              A dashboard is only a tool that should not be considered as an end itself. However, when properly configured and defined, it is certainly the best weapon for a CISO to make cyber governance more efficient.<\/p>\n

              To set up or update a dashboard, there are 4 success factors to remember:<\/p>\n

                \n
              1. Incremental<\/strong>: identifying sustainable indicators is difficult. Except for EXCOM dashboards, where an agile approach is necessary to integrate time for asking questions.<\/li>\n
              2. Inclusive<\/strong>: all teams must be involved to understand the purpose of gathered indicators (and the impact on their work). This will lead to increased reliability.<\/li>\n
              3. Scalable<\/strong>: the cyber ecosystem and its threats are growing exponentially. The designed dashboard needs to be flexible to consider the new risks that will arise (new KRI that needs to be implemented to the standard security base).<\/li>\n
              4. Simple<\/strong>: the purpose of a dashboard is to be shared. Therefore, it must be understandable at first sight. “Keep it simple” is necessary to simplify reading and accelerate appropriation.<\/li>\n<\/ol>\n","protected":false},"excerpt":{"rendered":"

                Dashboards are an essential tool for CISOs to measure and control risks in their scope, to steer their projects and to inform their management of the company\u2019s cyber health evolution. However, according to Wavestone\u2019s Cyber benchmark results from 2022, 47%…<\/p>\n","protected":false},"author":1450,"featured_media":19203,"comment_status":"open","ping_status":"closed","sticky":true,"template":"page-templates\/tmpl-one.php","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[3270,3977],"tags":[4201,3479,4056],"coauthors":[4199,4200],"class_list":["post-19212","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cyberrisk-management-strategy-en","category-focus","tag-dashboard","tag-indicators","tag-kpi-2"],"acf":[],"yoast_head":"\nTurn your dashboard into a real management asset against global cyber threats - RiskInsight<\/title>\n<meta name=\"description\" content=\"Dashboards are an essential tool for CISOs to measure and control risks in their scope, to steer their projects and to inform their management of the company\u2019s cyber health evolution.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.riskinsight-wavestone.com\/en\/2022\/12\/turn-your-dashboard-into-a-real-management-asset-against-global-cyber-threats\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Turn your dashboard into a real management asset against global cyber threats - RiskInsight\" \/>\n<meta property=\"og:description\" content=\"Dashboards are an essential tool for CISOs to measure and control risks in their scope, to steer their projects and to inform their management of the company\u2019s cyber health evolution.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.riskinsight-wavestone.com\/en\/2022\/12\/turn-your-dashboard-into-a-real-management-asset-against-global-cyber-threats\/\" \/>\n<meta property=\"og:site_name\" content=\"RiskInsight\" \/>\n<meta property=\"article:published_time\" content=\"2022-12-08T15:00:00+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2022-12-09T15:53:14+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.riskinsight-wavestone.com\/wp-content\/uploads\/2022\/12\/Dashboard.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"810\" \/>\n\t<meta property=\"og:image:height\" content=\"591\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Mathieu Bouchot, R\u00e9mi Bossuet\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Mathieu Bouchot, R\u00e9mi Bossuet\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"10 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/www.riskinsight-wavestone.com\/en\/2022\/12\/turn-your-dashboard-into-a-real-management-asset-against-global-cyber-threats\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/www.riskinsight-wavestone.com\/en\/2022\/12\/turn-your-dashboard-into-a-real-management-asset-against-global-cyber-threats\/\"},\"author\":{\"name\":\"Mathieu Bouchot\",\"@id\":\"https:\/\/www.riskinsight-wavestone.com\/en\/#\/schema\/person\/e7535ad304a403d8d2ac8626239ba50a\"},\"headline\":\"Turn your dashboard into a real management asset against global cyber threats\",\"datePublished\":\"2022-12-08T15:00:00+00:00\",\"dateModified\":\"2022-12-09T15:53:14+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/www.riskinsight-wavestone.com\/en\/2022\/12\/turn-your-dashboard-into-a-real-management-asset-against-global-cyber-threats\/\"},\"wordCount\":1776,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/www.riskinsight-wavestone.com\/en\/#organization\"},\"image\":{\"@id\":\"https:\/\/www.riskinsight-wavestone.com\/en\/2022\/12\/turn-your-dashboard-into-a-real-management-asset-against-global-cyber-threats\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.riskinsight-wavestone.com\/wp-content\/uploads\/2022\/12\/Dashboard.jpg\",\"keywords\":[\"dashboard\",\"indicators\",\"kpi\"],\"articleSection\":[\"Cyberrisk Management & Strategy\",\"Focus\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/www.riskinsight-wavestone.com\/en\/2022\/12\/turn-your-dashboard-into-a-real-management-asset-against-global-cyber-threats\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.riskinsight-wavestone.com\/en\/2022\/12\/turn-your-dashboard-into-a-real-management-asset-against-global-cyber-threats\/\",\"url\":\"https:\/\/www.riskinsight-wavestone.com\/en\/2022\/12\/turn-your-dashboard-into-a-real-management-asset-against-global-cyber-threats\/\",\"name\":\"Turn your dashboard into a real management asset against global cyber threats - RiskInsight\",\"isPartOf\":{\"@id\":\"https:\/\/www.riskinsight-wavestone.com\/en\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/www.riskinsight-wavestone.com\/en\/2022\/12\/turn-your-dashboard-into-a-real-management-asset-against-global-cyber-threats\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/www.riskinsight-wavestone.com\/en\/2022\/12\/turn-your-dashboard-into-a-real-management-asset-against-global-cyber-threats\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.riskinsight-wavestone.com\/wp-content\/uploads\/2022\/12\/Dashboard.jpg\",\"datePublished\":\"2022-12-08T15:00:00+00:00\",\"dateModified\":\"2022-12-09T15:53:14+00:00\",\"description\":\"Dashboards are an essential tool for CISOs to measure and control risks in their scope, to steer their projects and to inform their management of the company\u2019s cyber health evolution.\",\"breadcrumb\":{\"@id\":\"https:\/\/www.riskinsight-wavestone.com\/en\/2022\/12\/turn-your-dashboard-into-a-real-management-asset-against-global-cyber-threats\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.riskinsight-wavestone.com\/en\/2022\/12\/turn-your-dashboard-into-a-real-management-asset-against-global-cyber-threats\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.riskinsight-wavestone.com\/en\/2022\/12\/turn-your-dashboard-into-a-real-management-asset-against-global-cyber-threats\/#primaryimage\",\"url\":\"https:\/\/www.riskinsight-wavestone.com\/wp-content\/uploads\/2022\/12\/Dashboard.jpg\",\"contentUrl\":\"https:\/\/www.riskinsight-wavestone.com\/wp-content\/uploads\/2022\/12\/Dashboard.jpg\",\"width\":810,\"height\":591},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.riskinsight-wavestone.com\/en\/2022\/12\/turn-your-dashboard-into-a-real-management-asset-against-global-cyber-threats\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Accueil\",\"item\":\"https:\/\/www.riskinsight-wavestone.com\/en\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Turn your dashboard into a real management asset against global cyber threats\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.riskinsight-wavestone.com\/en\/#website\",\"url\":\"https:\/\/www.riskinsight-wavestone.com\/en\/\",\"name\":\"RiskInsight\",\"description\":\"The cybersecurity & digital trust blog by Wavestone's consultants\",\"publisher\":{\"@id\":\"https:\/\/www.riskinsight-wavestone.com\/en\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.riskinsight-wavestone.com\/en\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/www.riskinsight-wavestone.com\/en\/#organization\",\"name\":\"Wavestone\",\"url\":\"https:\/\/www.riskinsight-wavestone.com\/en\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.riskinsight-wavestone.com\/en\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/www.riskinsight-wavestone.com\/wp-content\/uploads\/2021\/08\/Monogramme\u2013W\u2013NEGA-RGB-50x50-1.png\",\"contentUrl\":\"https:\/\/www.riskinsight-wavestone.com\/wp-content\/uploads\/2021\/08\/Monogramme\u2013W\u2013NEGA-RGB-50x50-1.png\",\"width\":50,\"height\":50,\"caption\":\"Wavestone\"},\"image\":{\"@id\":\"https:\/\/www.riskinsight-wavestone.com\/en\/#\/schema\/logo\/image\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.riskinsight-wavestone.com\/en\/#\/schema\/person\/e7535ad304a403d8d2ac8626239ba50a\",\"name\":\"Mathieu Bouchot\",\"url\":\"https:\/\/www.riskinsight-wavestone.com\/en\/author\/mathieu-bouchot\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Turn your dashboard into a real management asset against global cyber threats - RiskInsight","description":"Dashboards are an essential tool for CISOs to measure and control risks in their scope, to steer their projects and to inform their management of the company\u2019s cyber health evolution.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.riskinsight-wavestone.com\/en\/2022\/12\/turn-your-dashboard-into-a-real-management-asset-against-global-cyber-threats\/","og_locale":"en_US","og_type":"article","og_title":"Turn your dashboard into a real management asset against global cyber threats - RiskInsight","og_description":"Dashboards are an essential tool for CISOs to measure and control risks in their scope, to steer their projects and to inform their management of the company\u2019s cyber health evolution.","og_url":"https:\/\/www.riskinsight-wavestone.com\/en\/2022\/12\/turn-your-dashboard-into-a-real-management-asset-against-global-cyber-threats\/","og_site_name":"RiskInsight","article_published_time":"2022-12-08T15:00:00+00:00","article_modified_time":"2022-12-09T15:53:14+00:00","og_image":[{"width":810,"height":591,"url":"https:\/\/www.riskinsight-wavestone.com\/wp-content\/uploads\/2022\/12\/Dashboard.jpg","type":"image\/jpeg"}],"author":"Mathieu Bouchot, R\u00e9mi Bossuet","twitter_misc":{"Written by":"Mathieu Bouchot, R\u00e9mi Bossuet","Est. reading time":"10 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.riskinsight-wavestone.com\/en\/2022\/12\/turn-your-dashboard-into-a-real-management-asset-against-global-cyber-threats\/#article","isPartOf":{"@id":"https:\/\/www.riskinsight-wavestone.com\/en\/2022\/12\/turn-your-dashboard-into-a-real-management-asset-against-global-cyber-threats\/"},"author":{"name":"Mathieu Bouchot","@id":"https:\/\/www.riskinsight-wavestone.com\/en\/#\/schema\/person\/e7535ad304a403d8d2ac8626239ba50a"},"headline":"Turn your dashboard into a real management asset against global cyber threats","datePublished":"2022-12-08T15:00:00+00:00","dateModified":"2022-12-09T15:53:14+00:00","mainEntityOfPage":{"@id":"https:\/\/www.riskinsight-wavestone.com\/en\/2022\/12\/turn-your-dashboard-into-a-real-management-asset-against-global-cyber-threats\/"},"wordCount":1776,"commentCount":0,"publisher":{"@id":"https:\/\/www.riskinsight-wavestone.com\/en\/#organization"},"image":{"@id":"https:\/\/www.riskinsight-wavestone.com\/en\/2022\/12\/turn-your-dashboard-into-a-real-management-asset-against-global-cyber-threats\/#primaryimage"},"thumbnailUrl":"https:\/\/www.riskinsight-wavestone.com\/wp-content\/uploads\/2022\/12\/Dashboard.jpg","keywords":["dashboard","indicators","kpi"],"articleSection":["Cyberrisk Management & Strategy","Focus"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.riskinsight-wavestone.com\/en\/2022\/12\/turn-your-dashboard-into-a-real-management-asset-against-global-cyber-threats\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/www.riskinsight-wavestone.com\/en\/2022\/12\/turn-your-dashboard-into-a-real-management-asset-against-global-cyber-threats\/","url":"https:\/\/www.riskinsight-wavestone.com\/en\/2022\/12\/turn-your-dashboard-into-a-real-management-asset-against-global-cyber-threats\/","name":"Turn your dashboard into a real management asset against global cyber threats - RiskInsight","isPartOf":{"@id":"https:\/\/www.riskinsight-wavestone.com\/en\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.riskinsight-wavestone.com\/en\/2022\/12\/turn-your-dashboard-into-a-real-management-asset-against-global-cyber-threats\/#primaryimage"},"image":{"@id":"https:\/\/www.riskinsight-wavestone.com\/en\/2022\/12\/turn-your-dashboard-into-a-real-management-asset-against-global-cyber-threats\/#primaryimage"},"thumbnailUrl":"https:\/\/www.riskinsight-wavestone.com\/wp-content\/uploads\/2022\/12\/Dashboard.jpg","datePublished":"2022-12-08T15:00:00+00:00","dateModified":"2022-12-09T15:53:14+00:00","description":"Dashboards are an essential tool for CISOs to measure and control risks in their scope, to steer their projects and to inform their management of the company\u2019s cyber health evolution.","breadcrumb":{"@id":"https:\/\/www.riskinsight-wavestone.com\/en\/2022\/12\/turn-your-dashboard-into-a-real-management-asset-against-global-cyber-threats\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.riskinsight-wavestone.com\/en\/2022\/12\/turn-your-dashboard-into-a-real-management-asset-against-global-cyber-threats\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.riskinsight-wavestone.com\/en\/2022\/12\/turn-your-dashboard-into-a-real-management-asset-against-global-cyber-threats\/#primaryimage","url":"https:\/\/www.riskinsight-wavestone.com\/wp-content\/uploads\/2022\/12\/Dashboard.jpg","contentUrl":"https:\/\/www.riskinsight-wavestone.com\/wp-content\/uploads\/2022\/12\/Dashboard.jpg","width":810,"height":591},{"@type":"BreadcrumbList","@id":"https:\/\/www.riskinsight-wavestone.com\/en\/2022\/12\/turn-your-dashboard-into-a-real-management-asset-against-global-cyber-threats\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Accueil","item":"https:\/\/www.riskinsight-wavestone.com\/en\/"},{"@type":"ListItem","position":2,"name":"Turn your dashboard into a real management asset against global cyber threats"}]},{"@type":"WebSite","@id":"https:\/\/www.riskinsight-wavestone.com\/en\/#website","url":"https:\/\/www.riskinsight-wavestone.com\/en\/","name":"RiskInsight","description":"The cybersecurity & digital trust blog by Wavestone's consultants","publisher":{"@id":"https:\/\/www.riskinsight-wavestone.com\/en\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.riskinsight-wavestone.com\/en\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.riskinsight-wavestone.com\/en\/#organization","name":"Wavestone","url":"https:\/\/www.riskinsight-wavestone.com\/en\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.riskinsight-wavestone.com\/en\/#\/schema\/logo\/image\/","url":"https:\/\/www.riskinsight-wavestone.com\/wp-content\/uploads\/2021\/08\/Monogramme\u2013W\u2013NEGA-RGB-50x50-1.png","contentUrl":"https:\/\/www.riskinsight-wavestone.com\/wp-content\/uploads\/2021\/08\/Monogramme\u2013W\u2013NEGA-RGB-50x50-1.png","width":50,"height":50,"caption":"Wavestone"},"image":{"@id":"https:\/\/www.riskinsight-wavestone.com\/en\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/www.riskinsight-wavestone.com\/en\/#\/schema\/person\/e7535ad304a403d8d2ac8626239ba50a","name":"Mathieu Bouchot","url":"https:\/\/www.riskinsight-wavestone.com\/en\/author\/mathieu-bouchot\/"}]}},"_links":{"self":[{"href":"https:\/\/www.riskinsight-wavestone.com\/en\/wp-json\/wp\/v2\/posts\/19212","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.riskinsight-wavestone.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.riskinsight-wavestone.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.riskinsight-wavestone.com\/en\/wp-json\/wp\/v2\/users\/1450"}],"replies":[{"embeddable":true,"href":"https:\/\/www.riskinsight-wavestone.com\/en\/wp-json\/wp\/v2\/comments?post=19212"}],"version-history":[{"count":6,"href":"https:\/\/www.riskinsight-wavestone.com\/en\/wp-json\/wp\/v2\/posts\/19212\/revisions"}],"predecessor-version":[{"id":19255,"href":"https:\/\/www.riskinsight-wavestone.com\/en\/wp-json\/wp\/v2\/posts\/19212\/revisions\/19255"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.riskinsight-wavestone.com\/en\/wp-json\/wp\/v2\/media\/19203"}],"wp:attachment":[{"href":"https:\/\/www.riskinsight-wavestone.com\/en\/wp-json\/wp\/v2\/media?parent=19212"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.riskinsight-wavestone.com\/en\/wp-json\/wp\/v2\/categories?post=19212"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.riskinsight-wavestone.com\/en\/wp-json\/wp\/v2\/tags?post=19212"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/www.riskinsight-wavestone.com\/en\/wp-json\/wp\/v2\/coauthors?post=19212"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}