Rate of Recurrence of Previously Mitigated Risks

Measures the rate at which previously mitigated risks re-emerge. A high recurrence rate could indicate ineffective risk mitigation strategies.

Formula

(Number of recurring risks / Number of mitigated risks) x 100

Example

If 3 out of 15 mitigated risks recur, the rate would be 20%.

Other Risk & Incident Management KPIs

• Mean Time to Detect Incidents
• Mean Time to Respond to Incidents
• Number of Identified Risks
• Number of Incidents Resolved vs Reported
• Number of Security Incidents Reported