CRISC · Question #451
Which of the following is the BEST key performance indicator (KPI) for a server patch management process?
The correct answer is C. The percentage of servers patched within required service level agreements. A key performance indicator (KPI) for server patch management should effectively measure the success and timeliness of patching efforts.
Question
Which of the following is the BEST key performance indicator (KPI) for a server patch management process?
Options
- AThe percentage of servers with allowed patching exceptions
- BThe number of servers with local credentials to install patches
- CThe percentage of servers patched within required service level agreements
- DThe number of servers running the software patching service
How the community answered
(18 responses)- A11% (2)
- B6% (1)
- C83% (15)
Why each option
A key performance indicator (KPI) for server patch management should effectively measure the success and timeliness of patching efforts.
While important for understanding exceptions, this doesn't measure the performance of the patching process itself but rather the number of allowed deviations.
The presence of local credentials for patch installation is a security configuration detail, not a direct measure of patching process performance or effectiveness.
This KPI directly measures the success rate and compliance of the patch management process against established timeliness requirements, which is crucial for maintaining security and operational stability. It indicates how well the organization is meeting its patching goals.
This indicates the coverage of the patching service, but not the actual success or timeliness of patch deployment to meet required SLAs.
Concept tested: Key Performance Indicators (KPIs) for security operations
Topics
Community Discussion
No community discussion yet for this question.