Page 230 - CyberSecurityEssentialsEnglish
P. 230
TABLE 5-15: ELEMENTS OF AN EVENT LOG
Element Its function Example
Case identifier Links events to a single case. Request number 4582.
The name of the step
Activity Data review.
performed.
When the step occurred, or its
Timestamp 2026-06-05 10:30.
start and end.
The person or system that The planning team, or the
Resource
performed it. extraction tool.
Accepted, rejected, or needs
Outcome The result of the step.
completion.
TABLE 5-16: INDICATORS FOR MEASURING A WORKFLOW
Indicator A simple method What it reveals
How quickly the result is
Cycle time Delivery time minus start time.
reached.
The sum of minutes of actual
Touch time The direct human effort.
work.
Returned cases divided by all Work that did not succeed the
Rework rate
cases. first time.
Cases accepted first time
First-pass yield The quality of the first output.
divided by all.
Errors after delivery divided by Errors that reached the
Error leakage rate
all cases. beneficiary.
The cost of people and tools
Cost per output The economic value.
per case.
Cases carried out by the Whether the workflow is
Adoption rate
approved method. actually usable.
229
