Interdependencies between essential and important entities

  1. Home
  2. Topics
  3. Cybersecurity Policy
  4. NIS Directive
  5. Interdependencies between essential and important entities

ENISA Interdependencies Indicators Tool

Interdependency indicator -
Category
IMPACT
Description
Economic Impact
Number of Controls
2 Cooperation Group
5 ISO IEC 27002
4 NIST Cybersecurity Framework
7 Cobit5
Mappings to: Cooperation Group (2) ISO IEC 27002 (5) NIST Cybersecurity Framework (4) Cobit5 (7)
Cobit5 Process Description EXAMPLE OF IMPLEMENTATION
Manage Programmes and Projects
Cobit5 Goal ID:
IT-05
Cobit5 Process ID:
BAI01
Domain:
IT Goal
Balanced Scorecard (BSC):
Financial
Sample Metrics:
• Percent of IT-enabled investments where benefit realisation is monitored through the full economic
life cycle
• Percent of IT services where expected benefits are realised
• Percent of IT-enabled investments where claimed benefits are met or exceeded
 Review IT-enabled programme documentation focusing on benefits. Summarize the benefits mentioned in the programme as achived by the implementation.
Ensure Stakeholder Transparency
Cobit5 Goal ID:
IT-06
Cobit5 Process ID:
EDM05
Domain:
IT Goal
Balanced Scorecard (BSC):
Financial
Sample Metrics:
• Percent of investment business cases with clearly defined and approved expected IT-related costs
and benefits
• Percent of IT services with clearly defined and approved operational costs and expected benefits
• Satisfaction survey of key stakeholders regarding the level of transparency, understanding and
accuracy of IT financial information
 Review the feedback on portfolio and programme performance regarding revenue. Summarize the financial aspect of the performance of the services, per service, per period of time.
Manage Programmes and Projects
Cobit5 Goal ID:
IT-13
Cobit5 Process ID:
BAI01
Domain:
IT Goal
Balanced Scorecard (BSC):
Internal
Sample Metrics:
• Number of programmes/projects on time and within budget
• Percent of stakeholders satisfied with programme/project quality
• Number of programmes needing significant rework due to quality defects
• Cost of application maintenance vs. overall IT cost
 Review the programmes business cases and summarize the expected financial benefits from their implementation per service, per period of time.
Manage Service Requests and Incidents
Cobit5 Goal ID:
IT-10
Cobit5 Process ID:
DSS02
Domain:
IT Goal
Balanced Scorecard (BSC):
Internal
Sample Metrics:
• Number of security incidents causing financial loss, business disruption or public embarrassment
• Number of IT services with outstanding security requirements
• Time to grant, change and remove access privileges, compared to agreed-on service levels
• Frequency of security assessment against latest standards and guidelines
 Review recorded service requests as information security incidents with a focus on financial impact. Calculate an average value per service per type and scale of incidents.
Ensure Resource Optimisation
Cobit5 Goal ID:
E-10
Cobit5 Process ID:
EDM04
Domain:
Enterprise Goal
Balanced Scorecard (BSC):
Customer
Sample Metrics:
• Frequency of service delivery cost optimisation assessments
• Trend of cost assessment vs. service level results
• Satisfaction levels of board and executive management with service delivery costs
 In the asset inventory, add a field related to the financial value of the asset. Count the value of assets that comprimize each service.
Ensure Benefits Delivery
Cobit5 Goal ID:
E-12
Cobit5 Process ID:
EDM02
Domain:
Enterprise Goal
Balanced Scorecard (BSC):
Internal
Sample Metrics:
• Frequency of business process cost optimisation assessments
• Trend of cost assessment vs. service level results
• Satisfaction levels of board and executive management with business processing costs
 Review the regular and relevant portfolio, programme and IT (technological and functional) performance reports with a focus on economic benefits. Summarize the economic benefits per service per period of time.
Ensure Stakeholder Transparency
Cobit5 Goal ID:
E-05
Cobit5 Process ID:
EDM05
Domain:
Enterprise Goal
Balanced Scorecard (BSC):
Financial
Sample Metrics:
• Percent of investment business cases with clearly defined and approved expected costs
and benefits
• Percent of products and services with defined and approved operational costs and expected benefits
• Satisfaction survey of key stakeholders regarding the transparency, understanding and accuracy of
enterprise financial information
• Percent of service cost that can be allocated to users
 Review the various reports implemented for internal and external stakeholders. Summarize the benefits (e.g. revenue) from each service.

This site uses cookies to offer you a better browsing experience.
Aside from essential cookies we also use tracking cookies for analytics.
Find out more on how we use cookies.

Accept all cookies Accept only essential cookies