Framework
Metrics, Monitoring and Performance Reporting Framework
This framework defines the governance metrics, Key Risk Indicators (KRIs), Key Performance Indicators (KPIs), and performance reporting structures that support measurement, monitoring, and continual improvement across enterprise GRC domains. It establishes standardized performance measurement across cybersecurity, privacy, AI, and supply-chain operations including BASC trade and customs compliance.
- Type
- Framework
- Version
- 1.1.14
- Date
- 2026-11-06
- Owner
- GRC Programme Manager
- Approving authority
- Governance Library Maintainer
- Classification
- Public
- Confidentiality
- Public
- Category
- Core Governance
- Review frequency
- Annual and upon material governance, regulatory, or measurement change
- Licence
- CC BY-SA 4.0
Read the full text on GitHub (opens in a new tab)
Outline
- Purpose
- Measurement domains and metrics
- Reporting frequency
- Metric quality requirements
- Reporting audiences
- Framework alignment
Frameworks it maps to
- ISO 9001:2015
- ISO/IEC 27004:2016
- NIST SP 800-55 Vol. 1
- NIST SP 800-55 Vol. 2
- ISO/IEC 42001:2023
- ISO 22301:2019
- COBIT 2019
- ISACA DTEF (2024)
- BASC v6 (2022)
- WCO SAFE Framework (2025 edition)
- ISO 28000:2022
Related documents
- Continuous Assurance and Improvement Frameworkgovernance
- Governance Performance and Improvement Frameworkgovernance
- Digital Trust and Assurance Metrics Registergovernance
- GRC Programme Management and Annual Review Proceduregovernance
- Corrective and Preventive Action (CAPA) Procedurecompliance
- AI Governance and Risk Frameworkai
Next
All Documents