Today’s Tuesday Reading is from Alex Khramov, Director of Cybersecurity Services at Colorado State University – Fort Collins and a MOR program alum. Alex may be reached at [email protected] or via LinkedIn.
One of the lessons that resonated with me most during my time in the MOR program is the importance of effectively capturing and presenting metrics to leadership. In an increasingly data-driven environment, having the correct data is critical for operational success and empowering leadership to make strategic decisions that drive our IT organization forward. The program has underscored that metrics must be meaningful, actionable, and aligned with organizational goals to be valuable at the leadership level.
One of the first insights I gained is that metrics, in and of themselves, are just numbers and may not mean anything to anyone outside of my department. The real value emerges when they are contextualized in a way that helps leadership understand what they represent. Whether it’s tracking vulnerabilities, identifying areas of risk, or account compromises, the metrics must tell a story. I’ve learned to ask critical questions before capturing any data: What decision does this metric support? What behavior or outcome are we trying to influence? What are the key areas of interest for leadership? My team has been working on a framework for why we track specific metrics, providing clarity on their purpose and relevance.
The discussions during the MOR sessions helped me realize that leadership is not always concerned with particular details but with larger trends and what those trends mean regarding, in my case, our cybersecurity practices. To address this, my team and I have begun tailoring the level of detail based on the audience. Too much data can overwhelm, while too little can undercut its usefulness. One of my key takeaways has been learning how to simplify numerical data into key insights, allowing leadership to focus on what truly matters.
Another aha moment is that the metrics we collect should be tightly aligned with organizational goals and objectives. Our senior leadership team needs to see the connection between the data being presented and the strategic goals they are striving to achieve. In cybersecurity, for example, metrics like threat response time, system vulnerabilities, or compliance levels become more powerful when linked to broader goals such as reducing risk, ensuring regulatory compliance, or enhancing operational security resilience.
While capturing accurate and relevant data is important, the next step is translating that data into insights that leadership can act upon. This involves not only presenting the metrics but also providing context, explaining trends, and offering recommendations based on the data. My team has developed a quarterly report close to accomplishing that, but it is still a work in progress. Rather than presenting only the raw numbers, we also provide context and the real meaning behind those numbers.
For example, suppose the data shows that account compromises have increased by 20%. In this case, we need to explain why that increase occurred, what it means for the organization’s risk profile, and what steps can be taken to mitigate future risks. This storytelling approach helps leadership understand not only the “what” but also the “why” and “how” of the data being presented. The last part of presenting the data is to offer potential solutions or strategies that can leave the senior leadership team with clear, actionable recommendations that guide decision-making.
Overall, the MOR program has deepened my understanding of how to capture and present metrics in a way that supports strategic decision-making.
Which of the following best describes your current state?
Last week, we asked which communication style do you identify with most:
- 30% said orange – get to the point
- 30% said green – give me the facts
- 22% said yellow – let me help you
- 18% said purple – I’m flexible to the group
Especially for the 60% of us who focus on the facts or want us to get quickly to the point, this week’s reading provides great food for thought: we are paid to deliver results. Metrics are key to enabling us to measure those results. Contextualizing those metrics and their story provides the meaning to gain further support for pursuing these results.