ORX Cyber Controls and Indicators Benchmark
A unique peer benchmark providing insight into the cyber risk management controls and indicators in place across the industry.
100+
cyber controls
190+
cyber indicators
25+
risks managed
The ORX Cyber Controls and Indicators Benchmark is an invaluable resource that provides an aggregated view of cyber control and indicator environments. It allows participating financial organisations to gain deeper insights and understanding of industry practice.
The ORX Cyber Controls and Indicators benchmarking provides personalised controls and indicators benchmark reports showing where your organisation is positioned compared to your peers across the industry. The first of its kind in the industry, the benchmark is available as part of the ORX Cyber service.
How does it work?
Each participant financial institution shares their data through our secure Agora platform in order to receive their personalised benchmark.
After rigorous quality assurance, we then publish your personalised benchmark report, outlining how your controls and indicators compare to those of your peers. An editorial reporting is published annually, providing further insights into the aggregated data sets.
How does the benchmark help the enhance control and indicator practices?
The ORX Cyber Controls and Indicators Benchmark supports the identification of weak, infective or missing controls and the effective allocation of IT budget. Controls are assessed against the 106 controls in Version 2.0 of the NIST Cybersecurity Framework, while indicators are assessed against our bespoke list of indicators, aligned to the functions of the NIST framework.
What's in the benchmark?
The benchmark provides insights on general industry practice, including control and indicator attributes including automation levels, control/indicator types, and associated risks. The benchmark is aligned to the industry NIST framework, participating firms complete the submission template by assessing their controls against the framework.
Control information
- Automated/manual/hybrid
- Operated internally or externally
- Operating frequency
- Preventive/corrective/detective/directive
- Risks managed
- Control effectiveness
Indicators information
- Automated/manual/hybrid
- Leading/lagging
- Indicator format and thresholds
- Related risks
- Monitoring frequency
- Reporting audience
Gated content start
The ORX Cyber Controls and Indicators Benchmark is available to ORX Cyber subscribers and ORX members
If your firm is a subscriber or a member, log in or register to find out more and take part.
Not an ORX Cyber subscriber? Find out more about the service and how it could benefit your firm.

