KPI: Access Management

KPI Definition	Unit of Measure	Frequency	Remarks
Number of access related requests (service request and RFCs)	Number	Monthly	This KPI reflects the number of access related requests received for a month. It can also be grouped together based on type of access request, service, user, department and the resource who has fulfilled the request. It highlights the workload and efficiency of access management team.
The number of incidents caused by incorrect access settings	Number	Monthly	This KPI highlights ineffectiveness of access management in effectively granting the access rights.
Number of instances where the access rights have not been revoked	Number	Monthly	This KPI highlights ineffectiveness of access management in effective and timely revoking the access rights of the employees who are no longer with the organization, department or project.
Number of instances where the access rights have not been modified based on role change of employee	Number	Monthly,	This KPI highlights ineffectiveness of access management in effectively deploying the ‘Group’ policies and thus granting and/or revoking the access rights.
Number of instances for which deviation has been identified from the defined security policy	Number	Monthly	This KPI signifies that security policies are not effectively implemented by access management team.