Most companies are already using or introducing many common security facilities. For example, it is difficult to imagine a modern enterprise network without any implementation of firewall, antivirus, and patch management mechanisms. Therefore, evaluation of performance of existing IS processes using security metrics and key performance indicators (KPI) becomes one of the most important issues. The extensible set of metrics included into MaxPatrol allows one to control the current state and the dynamics of common information security processes.

During deployment, the set of metrics can be adapted to meet the Customer needs. An important feature of the metrics is that they are measured in capital numbers (numbers of hosts, modifications, and policy violations), which makes it easy to convert them into business oriented terms such as man-hours or money.