Phased Rollout

ZT program KPIs literacy — MFA coverage, ZTNA adoption, segment coverage, DLP incidents — KPI dashboard stub on YOUR $ZT_LAB.

Phased Rollout• Audio Walkthrough

00:00/02:47

Visual · t40_kpis_metrics

ZT KPIs. $ZT_LAB. Original Cyberlium.

Executives ask numbers — define KPIs that prove progress without vanity metrics on LAB-ZT-001 dashboard stub.

Sample KPIs: MFA coverage % privileged, legacy auth blocked %, device compliance rate, apps on ZTNA vs VPN, microseg rules enforced, DLP incidents triaged, mean time to revoke access literacy. Dashboard stub: KPI | baseline | target | measurement source — fictional numbers labeled FICTional. Next: Roadmap Lab.

1. KPI categories (named)

Identity: MFA, CA policy coverage, orphan accounts. Device: compliance %, patch SLA. Network: ZTNA app count, east-west deny logs.

Data: labeled assets %, DLP tune rate. Program: milestone on-time %.

Command guide

Try these commands — KPI categories (named)

═══ LINUX / macOS (Terminal Practice) ═══

Check system state and user context

Command — copy this

id
whoami
uname -a

Inspect network sockets listening for connections

Command — copy this

ss -tuln 2>/dev/null || netstat -tuln

Audit active processes

Command — copy this

ps aux | grep -v "\[" | head -15

═══ WINDOWS (POWERSHELL) ═══ Query user identity and system information

Command — copy this

whoami /all
Get-ComputerInfo | Select-Object CsName, OsName, OsVersion

Primary tools to practice this lesson: grep, python3. Reference sites: CISA ZTMM (https://www.cisa.gov/zero-trust-maturity-model); NIST SP 800-207 (https://csrc.nist.gov/publications/detail/sp/800-207/final). Run every command in the box — install first, then the usage lines — only on YOUR lab / program scope.

2. Anti-vanity

Bad: total firewall rules count. Good: % sensitive apps behind ZTNA with posture check.

Each KPI links to roadmap milestone or pillar pack evidence.

3. Dashboard stub

Ten KPI rows with baseline, target, fictional measurement source.

Ship: KPI dashboard stub. Next: Roadmap Lab.

4. What you ship: KPI dashboard stub

Ten KPIs with baseline/target and FICTional label. $ZT_LAB. chmod 600.

5. What you record before the next lesson

Date. KPI stub. $ZT_LAB named. File t40-m09-l03-kpis-metrics.txt chmod 600.

6. Wrong vs right: bypass cookbooks vs YOUR ZT design

Worked failure — same MSF word, opposite target. Right never needs a café Wi-Fi or classmate laptop.

Wrong: KPI: number of security tools purchased. Use real employer metrics without scope.
Right: Write KPI dashboard with MFA coverage and ZTNA adoption rows. Next: Roadmap Lab.

Hands-on Exercise