{"id":378,"date":"2012-04-03T15:06:40","date_gmt":"2012-04-03T14:06:40","guid":{"rendered":"http:\/\/securite.intrinsec.com\/?p=378"},"modified":"2012-04-03T15:06:40","modified_gmt":"2012-04-03T14:06:40","slug":"tdb-ssi-24-tableaux-de-bord-securite-et-maturite","status":"publish","type":"post","link":"https:\/\/www.intrinsec.com\/en\/tdb-ssi-24-tableaux-de-bord-securite-et-maturite\/","title":{"rendered":"Security and maturity dashboards (2\/4)"},"content":{"rendered":"<p><em>This post follows a <a title=\"Safety dashboards (1\/4) \u2013 Introduction\" href=\"https:\/\/www.intrinsec.com\/en\/2011\/10\/09\/tableaux-de-bord-securite-14-introduction\/\">previous post on the topic of SSI dashboards<\/a>.<\/em><\/p>\n<p>In the previous post, we saw that dashboards are primarily used for management or communication purposes, but also that there isn&#039;t a single type of dashboard, but rather a multitude depending on their objectives. Finally, we presented the concept of a high-level, risk-oriented dashboard, adapted for reporting for information security governance.<\/p>\n<p>This type of dashboard is actually quite rare; the main obstacle being the required level of information security maturity. Indeed, a dashboard is an aggregate of indicators, themselves based on metrics constructed from collected data. For it to be useful, it is therefore essential to have relevant indicators, and thus to have clearly identified one&#039;s security needs as well as how to address them in technical and organizational terms. All of these elements require a minimum level of security maturity, which is far from being achieved by all information security management approaches.<\/p>\n<p>On the other hand, certain information essential for constructing relevant indicators is not always available due to a lack of structure in the information system and IT processes. This is the case, for example, with asset inventories (hardware, software, etc.) or risk and vulnerability classification criteria. Without this information, it becomes difficult to assess the proper implementation of measures across the system or to quantify a risk or exposure to a threat.<\/p>\n<p>Furthermore, for a dashboard to be useful, it must be fed with data at a frequency that allows it to show changes and trends over a given period. If the various metrics are too complex to obtain, data collection is likely to be delayed or simplified, compromising the dashboard&#039;s consistency and therefore its long-term usefulness. Establishing reliable data collection methods, following a well-defined procedure and frequency, at an appropriate cost, also requires a certain level of expertise.<\/p>\n<p>Faced with these problems, the easy solution might be to use the available information to create a dashboard. This includes statistics provided directly by security solutions, which are very tempting\u2026 but unfortunately, they are not always very relevant, or are even biased. Indeed, what does the number of blocked viruses represent? What should be inferred from a change in this number? An increase in the number of viruses or in the effectiveness of the solution? If time must be invested in developing a dashboard, it&#039;s best to ensure that the indicators provide useful information.<\/p>\n<p>Despite the difficulties mentioned earlier, it would be wrong to believe that the use of security dashboards is reserved solely for organizations with a very high level of security maturity. On the contrary, this tool can contribute to strengthening it, particularly by facilitating the implementation of a quality approach. Developing the dashboard will first require clearly defining the fundamental objectives to be achieved. Some of the data collected to populate it can be reused within an internal control process that is sometimes lacking. Providing relevant indicators, understood and accepted by its users (technical teams, management, etc.), allows for the establishment of a constructive dialogue based on factual elements. It unites teams around concrete objectives and actions that will eventually no longer be the sole concern of the CISO. Finally, the evolution of the indicators throughout the dashboard&#039;s lifespan will reflect the progressive achievement of objectives and the improvement in the level of security. More demanding indicators will set new areas for progress, thus contributing to the implementation of the virtuous circle of any quality approach.<\/p>\n<p style=\"text-align: center;\"><a href=\"https:\/\/www.intrinsec.com\/wp-content\/uploads\/2012\/04\/tdb-2.png\"><img fetchpriority=\"high\" decoding=\"async\" class=\"alignnone size-full wp-image-379\" src=\"https:\/\/www.intrinsec.com\/wp-content\/uploads\/2012\/04\/tdb-2.png\" alt=\"\" width=\"451\" height=\"414\" \/><\/a><\/p>\n<p>In the end, we realize that while the issue of SSI maturity is strongly linked to security dashboards, it does not constitute a hindrance to their use, but on the contrary, an appropriate use of indicators can greatly help to build and support a security approach, the raising of the security level will bring about the raising of the security level.<\/p>\n<p>In our next posts, we will focus on the heart of the matter, namely the choice of relevant security indicators and the pitfalls to avoid when setting up a dashboard.<\/p>\n<p><em>The next post will deal with the development of dashboards.<\/em><\/p>","protected":false},"excerpt":{"rendered":"<p>Ce billet fait suite \u00e0 un pr\u00e9c\u00e9dent billet sur le th\u00e8me des tableaux de bord [&hellip;]<\/p>\n","protected":false},"author":13,"featured_media":174,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[7],"tags":[72,84,74],"class_list":["post-378","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-conseil-ssi","tag-tableau-de-bord","tag-tableaux-de-bord-securite","tag-tdb"],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v28.0 (Yoast SEO v28.1) - https:\/\/yoast.com\/product\/yoast-seo-premium-wordpress\/ -->\n<title>Tableaux de bord s\u00e9curit\u00e9 et maturit\u00e9 (2\/4) - INTRINSEC<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.intrinsec.com\/en\/tdb-ssi-24-tableaux-de-bord-securite-et-maturite\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Tableaux de bord s\u00e9curit\u00e9 et maturit\u00e9 (2\/4)\" \/>\n<meta property=\"og:description\" content=\"Ce billet fait suite \u00e0 un pr\u00e9c\u00e9dent billet sur le th\u00e8me des tableaux de bord [&hellip;]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.intrinsec.com\/en\/tdb-ssi-24-tableaux-de-bord-securite-et-maturite\/\" \/>\n<meta property=\"og:site_name\" content=\"INTRINSEC\" \/>\n<meta property=\"article:published_time\" content=\"2012-04-03T14:06:40+00:00\" \/>\n<meta name=\"author\" content=\"Admin\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@Intrinsec\" \/>\n<meta name=\"twitter:site\" content=\"@Intrinsec\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Admin\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.intrinsec.com\\\/tdb-ssi-24-tableaux-de-bord-securite-et-maturite\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.intrinsec.com\\\/tdb-ssi-24-tableaux-de-bord-securite-et-maturite\\\/\"},\"author\":{\"name\":\"Admin\",\"@id\":\"https:\\\/\\\/www.intrinsec.com\\\/#\\\/schema\\\/person\\\/5636e3e5276b952facbd0aadb12a858a\"},\"headline\":\"Tableaux de bord s\u00e9curit\u00e9 et maturit\u00e9 (2\\\/4)\",\"datePublished\":\"2012-04-03T14:06:40+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.intrinsec.com\\\/tdb-ssi-24-tableaux-de-bord-securite-et-maturite\\\/\"},\"wordCount\":865,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\\\/\\\/www.intrinsec.com\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/www.intrinsec.com\\\/tdb-ssi-24-tableaux-de-bord-securite-et-maturite\\\/#primaryimage\"},\"thumbnailUrl\":\"\",\"keywords\":[\"Tableau de bord\",\"Tableaux de bord s\u00e9curit\u00e9\",\"TDB\"],\"articleSection\":[\"Conseil SSI\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/www.intrinsec.com\\\/tdb-ssi-24-tableaux-de-bord-securite-et-maturite\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.intrinsec.com\\\/tdb-ssi-24-tableaux-de-bord-securite-et-maturite\\\/\",\"url\":\"https:\\\/\\\/www.intrinsec.com\\\/tdb-ssi-24-tableaux-de-bord-securite-et-maturite\\\/\",\"name\":\"Tableaux de bord s\u00e9curit\u00e9 et maturit\u00e9 (2\\\/4) - INTRINSEC\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.intrinsec.com\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.intrinsec.com\\\/tdb-ssi-24-tableaux-de-bord-securite-et-maturite\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.intrinsec.com\\\/tdb-ssi-24-tableaux-de-bord-securite-et-maturite\\\/#primaryimage\"},\"thumbnailUrl\":\"\",\"datePublished\":\"2012-04-03T14:06:40+00:00\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.intrinsec.com\\\/tdb-ssi-24-tableaux-de-bord-securite-et-maturite\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.intrinsec.com\\\/tdb-ssi-24-tableaux-de-bord-securite-et-maturite\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.intrinsec.com\\\/tdb-ssi-24-tableaux-de-bord-securite-et-maturite\\\/#primaryimage\",\"url\":\"\",\"contentUrl\":\"\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.intrinsec.com\\\/tdb-ssi-24-tableaux-de-bord-securite-et-maturite\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Accueil\",\"item\":\"https:\\\/\\\/www.intrinsec.com\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Tableaux de bord s\u00e9curit\u00e9 et maturit\u00e9 (2\\\/4)\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.intrinsec.com\\\/#website\",\"url\":\"https:\\\/\\\/www.intrinsec.com\\\/\",\"name\":\"INTRINSEC\",\"description\":\"Notre m\u00e9tier , Prot\u00e9ger le v\u00f4tre\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.intrinsec.com\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.intrinsec.com\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.intrinsec.com\\\/#organization\",\"name\":\"INTRINSEC\",\"alternateName\":\"ISEC\",\"url\":\"https:\\\/\\\/www.intrinsec.com\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.intrinsec.com\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.intrinsec.com\\\/wp-content\\\/uploads\\\/2025\\\/02\\\/libellule.png\",\"contentUrl\":\"https:\\\/\\\/www.intrinsec.com\\\/wp-content\\\/uploads\\\/2025\\\/02\\\/libellule.png\",\"width\":1322,\"height\":1322,\"caption\":\"INTRINSEC\"},\"image\":{\"@id\":\"https:\\\/\\\/www.intrinsec.com\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/x.com\\\/Intrinsec\",\"https:\\\/\\\/fr.linkedin.com\\\/company\\\/intrinsec\",\"https:\\\/\\\/www.youtube.com\\\/channel\\\/UC0trUZAHNZOUbxYnNdecM4A\"],\"description\":\"soci\u00e9t\u00e9 de consulting, pure player cybers\u00e9curit\u00e9 fran\u00e7ais et europ\u00e9en depuis plus de 30ans, sp\u00e9cialiste dans la s\u00e9curit\u00e9 offensive & audit (pentest\\\/red team), GRC, et services IMSS comme le SOC, CTI et CERT Intrinsec est qualifi\u00e9 PASSI Elev\u00e9, PRIS Elev\u00e9 et PACS par l'ANSSI\",\"email\":\"contact@intrinsec.com\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.intrinsec.com\\\/#\\\/schema\\\/person\\\/5636e3e5276b952facbd0aadb12a858a\",\"name\":\"Admin\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/?s=96&d=retro&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/?s=96&d=retro&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/?s=96&d=retro&r=g\",\"caption\":\"Admin\"},\"url\":\"https:\\\/\\\/www.intrinsec.com\\\/en\\\/author\\\/admin\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Security and Maturity Dashboards (2\/4) - INTRINSEC","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.intrinsec.com\/en\/tdb-ssi-24-tableaux-de-bord-securite-et-maturite\/","og_locale":"en_US","og_type":"article","og_title":"Tableaux de bord s\u00e9curit\u00e9 et maturit\u00e9 (2\/4)","og_description":"Ce billet fait suite \u00e0 un pr\u00e9c\u00e9dent billet sur le th\u00e8me des tableaux de bord [&hellip;]","og_url":"https:\/\/www.intrinsec.com\/en\/tdb-ssi-24-tableaux-de-bord-securite-et-maturite\/","og_site_name":"INTRINSEC","article_published_time":"2012-04-03T14:06:40+00:00","author":"Admin","twitter_card":"summary_large_image","twitter_creator":"@Intrinsec","twitter_site":"@Intrinsec","twitter_misc":{"Written by":"Admin","Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.intrinsec.com\/tdb-ssi-24-tableaux-de-bord-securite-et-maturite\/#article","isPartOf":{"@id":"https:\/\/www.intrinsec.com\/tdb-ssi-24-tableaux-de-bord-securite-et-maturite\/"},"author":{"name":"Admin","@id":"https:\/\/www.intrinsec.com\/#\/schema\/person\/5636e3e5276b952facbd0aadb12a858a"},"headline":"Tableaux de bord s\u00e9curit\u00e9 et maturit\u00e9 (2\/4)","datePublished":"2012-04-03T14:06:40+00:00","mainEntityOfPage":{"@id":"https:\/\/www.intrinsec.com\/tdb-ssi-24-tableaux-de-bord-securite-et-maturite\/"},"wordCount":865,"commentCount":0,"publisher":{"@id":"https:\/\/www.intrinsec.com\/#organization"},"image":{"@id":"https:\/\/www.intrinsec.com\/tdb-ssi-24-tableaux-de-bord-securite-et-maturite\/#primaryimage"},"thumbnailUrl":"","keywords":["Tableau de bord","Tableaux de bord s\u00e9curit\u00e9","TDB"],"articleSection":["Conseil SSI"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.intrinsec.com\/tdb-ssi-24-tableaux-de-bord-securite-et-maturite\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/www.intrinsec.com\/tdb-ssi-24-tableaux-de-bord-securite-et-maturite\/","url":"https:\/\/www.intrinsec.com\/tdb-ssi-24-tableaux-de-bord-securite-et-maturite\/","name":"Security and Maturity Dashboards (2\/4) - INTRINSEC","isPartOf":{"@id":"https:\/\/www.intrinsec.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.intrinsec.com\/tdb-ssi-24-tableaux-de-bord-securite-et-maturite\/#primaryimage"},"image":{"@id":"https:\/\/www.intrinsec.com\/tdb-ssi-24-tableaux-de-bord-securite-et-maturite\/#primaryimage"},"thumbnailUrl":"","datePublished":"2012-04-03T14:06:40+00:00","breadcrumb":{"@id":"https:\/\/www.intrinsec.com\/tdb-ssi-24-tableaux-de-bord-securite-et-maturite\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.intrinsec.com\/tdb-ssi-24-tableaux-de-bord-securite-et-maturite\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.intrinsec.com\/tdb-ssi-24-tableaux-de-bord-securite-et-maturite\/#primaryimage","url":"","contentUrl":""},{"@type":"BreadcrumbList","@id":"https:\/\/www.intrinsec.com\/tdb-ssi-24-tableaux-de-bord-securite-et-maturite\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Accueil","item":"https:\/\/www.intrinsec.com\/"},{"@type":"ListItem","position":2,"name":"Tableaux de bord s\u00e9curit\u00e9 et maturit\u00e9 (2\/4)"}]},{"@type":"WebSite","@id":"https:\/\/www.intrinsec.com\/#website","url":"https:\/\/www.intrinsec.com\/","name":"INTRINSEC","description":"Our job is to protect yours.","publisher":{"@id":"https:\/\/www.intrinsec.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.intrinsec.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.intrinsec.com\/#organization","name":"INTRINSEC","alternateName":"ISEC","url":"https:\/\/www.intrinsec.com\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.intrinsec.com\/#\/schema\/logo\/image\/","url":"https:\/\/www.intrinsec.com\/wp-content\/uploads\/2025\/02\/libellule.png","contentUrl":"https:\/\/www.intrinsec.com\/wp-content\/uploads\/2025\/02\/libellule.png","width":1322,"height":1322,"caption":"INTRINSEC"},"image":{"@id":"https:\/\/www.intrinsec.com\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/Intrinsec","https:\/\/fr.linkedin.com\/company\/intrinsec","https:\/\/www.youtube.com\/channel\/UC0trUZAHNZOUbxYnNdecM4A"],"description":"Intrinsec, a consulting firm and pure-play French and European cybersecurity provider for over 30 years, specializes in offensive security and auditing (penetration testing\/red teams), GRC, and IMSS services such as SOC, CTI, and CERT. Intrinsec is qualified at PASSI High, PRIS High, and PACS levels by ANSSI.","email":"contact@intrinsec.com"},{"@type":"Person","@id":"https:\/\/www.intrinsec.com\/#\/schema\/person\/5636e3e5276b952facbd0aadb12a858a","name":"Admin","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/?s=96&d=retro&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/?s=96&d=retro&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/?s=96&d=retro&r=g","caption":"Admin"},"url":"https:\/\/www.intrinsec.com\/en\/author\/admin\/"}]}},"_links":{"self":[{"href":"https:\/\/www.intrinsec.com\/en\/wp-json\/wp\/v2\/posts\/378","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.intrinsec.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.intrinsec.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.intrinsec.com\/en\/wp-json\/wp\/v2\/users\/13"}],"replies":[{"embeddable":true,"href":"https:\/\/www.intrinsec.com\/en\/wp-json\/wp\/v2\/comments?post=378"}],"version-history":[{"count":0,"href":"https:\/\/www.intrinsec.com\/en\/wp-json\/wp\/v2\/posts\/378\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.intrinsec.com\/en\/wp-json\/wp\/v2\/media?parent=378"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.intrinsec.com\/en\/wp-json\/wp\/v2\/categories?post=378"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.intrinsec.com\/en\/wp-json\/wp\/v2\/tags?post=378"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}