Assessment & Reporting Terms

Term

Definition

SPI Pillars

The four core domains of SPI 360: Strategy, Governance, People & Culture, and Technology. Each pillar has its own assessment criteria, metrics, and strategic role.

SPI Heatmap

A visual representation of strengths, gaps, and friction across the four SPI pillars—used to prioritize efforts and communicate risks.

OKRs

Objectives & Key Results — a goal-setting framework that defines what you want to achieve and how you’ll measure progress. Used in SPI 360 to align cybersecurity with strategic business outcomes.

KPIs

Key Performance Indicators — metrics used to track operational effectiveness. SPI 360 integrates KPIs with OKRs to monitor execution and delivery.

KRIs

Key Risk Indicators — metrics that signal potential exposure, degradation of controls, or emerging threats. KRIs complement KPIs in SPI-aligned governance.

Published with Nuclino