Wikimedia Security Team/Metrics

= KPI's = = Metrics = These metrics will be tracked in a non-public location
 * Number of open "Unbreak Now!" and High Priority security bugs
 * This metric should be decreasing each quarter
 * https://docs.google.com/a/wikimedia.org/spreadsheets/d/1xrahemS3-CNqDdT9hmIHJ9frr_qJvAzhtos4uA-CUDs/edit?usp=sharing

Security Bugs

 * The number of open "Unbreak Now!" and High Priority security bugs
 * Priorities are set according to documented standard

Security Reviews

 * Total open requests

Training

 * Number of trainings held
 * Number of attendees for training

Incident Response

 * Number of incidents

= Metrics that the team does not currently track =
 * Security Bugs: Number of Tasks open by priority level
 * Security Bugs: Average time to: (needs to reflect wmf "supported" vs community supported, automatically exclude stuff tagged security to keep private)
 * Triage and assign priority
 * Fix developed, by priority
 * Fix in production, by priority
 * Fix released publicly, by priority
 * Reviews: Number opened, number closed each quarter
 * Reviews: Average time to close