The Metrics SIG

This quarter, the Metrics SIG released Metrics for the FIRST CSIRT Services Framework – Version 1.1, completing metrics for all five service areas of the Framework. The release also includes refinements to improve consistency, readability, and implementation guidance, providing organizations with practical resources to establish and mature their measurement programs.

Looking ahead, the SIG is expanding its work beyond the CSIRT Services Framework. Upcoming initiatives include developing metrics for National CERTs, building a curated cybersecurity metrics knowledge base, and exploring measurement approaches for operational technology (OT) environments.

The Metrics SIG remains focused on helping organizations improve cybersecurity operations through performance measurement. As part of our ongoing leadership transition, we will announce our next chair(s) in the coming weeks. We welcome anyone interested in advancing cybersecurity measurement to join us and help shape its future.

Logan WIlkins, Chair, Metrics SIG

Published on FIRST POST: Apr-Jun 2026