The process model below, from NIST SP800-55, describes the steps in implementing a cybersecurity measurement program.

As you can see in Steps 3-6, identification and corrective actions feed back into Step 2, collecting and analyzing results.

Pick a reportable metric or measurement for which theres sufficient data to analyze results.

Describe its measurement scale (what it measures, e.g., counts, time, etc.).

Identify the distinctions for good (green) results, for results to keep an eye on (yellow), and for results that need attention (red).

In the case of results in the red condition, identify the corrective actions you would recommend and explain why?