The University of SydneyPage 39KGIs, KPIs, CSFsResource Management•The effectiveness of knowledge capture and dissemination•The proportional costs of the security program to the value being protected•Costs and performance benchmarked compared to rest of the industry