Focusing on IT security indicators (be it desktop, server, architecture by site and employee awareness). These indicators are:

• Security Patches Servers / Clients : PCs/Servers protected - number of PCs being patched and number of tasks patches in Servers and the percentage achieved

• ICS Architecture implemented : Monitoring security architecture by site with risk classification ranking and cost impact when non business days

• • • 3 levels of Security Architectures:

• • • • IT SBS

      • GEC OT

      • IT SBS & GEC OT

• Employee with a valid e-security training Certificate:

  • • Percentage of employee with valid E-Security Training Certification

    • Percentage of employee with valid E-Security Training Certification by status

      • • Never passed = with no date for E-security training

        • Expired = E-security training date >= 1year

        • Valid = E-security training date < 1year

• Percentage of Blocked users