HOW WE MEASURE RESULTS
We don't ask you to trust us. We PROVE it.
Every Cyber6 engagement runs on PROVE: we plan what success means, record where you start, and verify what changed, including what didn't.
ILLUSTRATION · NOT CLIENT DATA
WHY MEASUREMENT MATTERS
Before and after, not promises.
Too many technology providers report activity, like tickets closed and hours logged, instead of outcomes. Cyber6 reports what changed for your business.
ACTIVITY REPORT
EXAMPLE- 142 tickets closed
- 37 patches pushed
- 96 hours logged
- 18 alerts reviewed
- 11 calls taken
- 6 meetings held
Lots of counting. Nothing about what changed for you.
OUTCOME REPORT
EXAMPLE- Leads answered faster (improving)
- Every device protected (improving)
- More staff reporting phishing (improving)
Three plain statements, each compared with where you started.
THE CYBER6 PROVE FRAMEWORK
PROVE: five steps, repeated every cycle.
STEP 1 OF 5
Plan the goals
We agree on the outcomes that matter to your business and the measures for each, with a target and a timeframe.
- WHAT YOU GET
- A one-page plan.
PROVE is how Cyber6 Core measures results across Automate, Protect, and Empower. When Evolve ends, Plan begins again.
THREE KINDS OF MEASURES
We track what we do, what changes, and what it's worth to you.
LEVEL 1 · WHAT WE DID
Activity
Tickets resolved, automations running, trainings delivered. Useful, but not the goal.
LEVEL 2 · WHAT CHANGED
Outcomes
Response time, devices protected, phishing reporting rate.
LEVEL 3 · WHAT IT'S WORTH
Business impact
Hours given back, money collected, risk reduced, calculated with your own numbers (like your hourly costs or average job value), never ours.
We lead with outcomes and business impact, and include activity only as supporting detail.
Leading measures warn you early, like updates that are overdue.
Lagging measures confirm results, like downtime avoided.
THE MEASURES LIBRARY
Every measure, defined.
- WHAT IT IS
- Time from a new call, text, or form to the first reply.
- WHERE THE DATA COMES FROM
- Phone system, website forms, CRM
- HOW OFTEN
- Continuously, reported monthly
- WHICH DIRECTION IS GOOD
- ↓ Lower is better
- FOUNDATION
- Get customers
MATURITY
Progress you can see, one level at a time.
AI & AUTOMATION
CYBER6 LEVELS- ManualWork is done by hand, and follow-ups depend on someone remembering.
- AssistedTemplates, reminders, and some tools help, but people still drive every step.
- AutomatedEXAMPLE POSITIONKey workflows run on their own, and people handle the exceptions.
- OptimizedAutomations are measured and improved regularly, and new processes are automated by default.
IT & CYBERSECURITY
NIST CSF TIERS- Tier 1 · PartialSecurity is ad hoc.
- Tier 2 · Risk InformedRisks are known, but practices aren't consistent.
- Tier 3 · RepeatableEXAMPLE POSITIONPractices are formal and consistent.
- Tier 4 · AdaptivePractices improve continuously based on experience and threats.
TRAINING
CYBER6 LEVELS- UnawareNo regular training; staff aren't sure how to spot a scam.
- AwareEXAMPLE POSITIONBasic training is done, and staff recognize common scams.
- SkilledRole-based training and regular practice; staff report suspicious messages quickly.
- LeadingSecurity and AI habits are part of the culture, and leaders practice what to do in an incident.
IT & Cybersecurity uses the four Implementation Tiers from the NIST Cybersecurity Framework. The AI & Automation and Training levels are Cyber6's own.
We assess your level during Record, and report progress every quarter.
WHERE THE NUMBERS COME FROM
Real numbers from your real systems.
- 01
We use data you already have wherever possible.
- 02
We show our method so you can check it.
- 03
We collect only what's needed.
- 04
Measurement data is protected like the rest of your data. Trust Center →
- 05
Training results are reported to leadership for the team as a whole, not by name. Each person sees their own results privately. People who repeatedly click practice phishing emails are offered extra coaching, never penalized by us.
- 06
Your data belongs to you. We use it only to deliver and measure our work for you, and when our work together ends, we return or securely delete it within 30 days, with written confirmation on request.
YOUR SCORECARD
What your scorecard looks like.
- Your baseline
- Your target
- Where you are now
- What we're doing about it
Quarterly scorecard
EXAMPLE — NOT CLIENT DATAAI & AUTOMATION
- Response timeOn track
Trend improving, status On track.
- Booking rateWatch
Trend improving, status Watch.
- Hours savedOn track
Trend improving, status On track.
IT & CYBERSECURITY
- Devices protected and updatedOn track
Trend improving, status On track.
- MFA coverageWatch
Trend improving, status Watch.
- Backups testedOff track
Trend flat, status Off track.
PLANRestore tests were missed. We've scheduled them monthly and will retest before the next report.
- Repeat issuesOn track
Trend improving, status On track.
TRAINING
- CompletionOn track
Trend improving, status On track.
- Phishing reporting rateWatch
Trend improving, status Watch.
- Time to reportOn track
Trend improving, status On track.
When a measure is off track, the report says so and includes a plan to fix it.
HOW RESULTS REACH YOU
A rhythm you can count on.
Managed clients get a monthly report and a quarterly review meeting. Project clients get a report at each milestone and a final report at the end.
PROVE STEP
V
Verify the results
- Scorecard: each measure vs. baseline and target
- Highlights
- Issues and how we're fixing them
- Next month's focus
OUR MEASUREMENT PROMISES
Five things we hold ourselves to.
- 01We agree on the measures with you before we start.
- 02We use the same method every time, so the comparison is fair.
- 03We report misses as clearly as wins.
- 04We never inflate numbers or count activity as results.
- 05Results depend on your business. We show you the before and after, not a promise.
FAQS
Questions about how we measure.
What does PROVE stand for?
Plan the goals, Record the baseline, Operate and observe, Verify the results, and Evolve. It's the five-step cycle Cyber6 Core uses to measure results across Automate, Protect, and Empower.
How soon will we see results?
It depends on the measure. Some move within weeks, like response time or devices updated. Others take a quarter or more, like retention or phishing reporting. We'll say which is which during Plan.
What if a number gets worse?
The report says so plainly, explains why, and includes a plan to fix it. Misses are reported as clearly as wins.
Can we see the raw data behind the report?
Yes. We show our method and can walk you through the data behind any number.
Who owns the data used for measurement?
Your data belongs to you. We use it only to deliver and measure our work for you, and when our work together ends, we return or securely delete it within 30 days, with written confirmation on request.
Do you guarantee results?
No. We commit to the work, the method, and honest reporting.
How do you calculate business impact?
With your own numbers, such as your hourly costs or average job value. We don't plug in industry averages.
Do you measure individual employees?
No. We measure how your systems, processes, and team are doing as a whole. We don't score individual employees' performance.
Let's find your starting point.
A 30-minute call. No cost, no pressure, and honest answers.
