The University of SydneyPage 40KGIs, KPIs, CSFsPerformance Measurement•The time it takes to detect, report and react to security incidents•Trends in audit findings•Number of variances•Down time for critical systems•Trends in impacts