Toolkit
UTIOM · Metrics and KPIs

Turn your raw counts into UTIOM indicators

Seventy metrics following the UTIOM lifecycle in order: vision, strategy and crown jewels before visibility and detection. Each carries an explicit formula. Enter the counts you already have and the tool produces a scorecard split by leading and lagging indicators.

Leading indicators tell you what will happen. Lagging indicators tell you what already did. Most SOCs report only lagging numbers, which is why performance gets discussed after incidents rather than before them. Steer by the green-tagged metrics; report the rest.
Leading avg
Lagging in target
0Metrics entered

Your metrics scorecard

Bands are starting points, not standards. Tune them to your risk appetite, then hold them steady so the trend means something.

Leading indicator average
Lagging indicators within target
Metrics below 40%

Lifecycle profile

Average of completed percentage metrics in each phase, in lifecycle order.

What the numbers are telling you

    Open capability assessment