Prevention metrics

- Patch compliance (critical within SLA, by severity) - MFA enrollment rate (per system, per method) - Email security (blocked, delivered to inbox, reported) - Endpoint hygiene (EDR coverage, OS versions, disk encryption) - Cloud configuration compliance (CIS, custom)