指標、KPI 與展現 ROI

# 範例：AI 紅隊計畫的簡易指標追蹤
from dataclasses import dataclass
from datetime import datetime
 
@dataclass
class Finding:
    id: str
    title: str
    severity: str  # critical, high, medium, low
    system: str
    found_date: datetime
    reported_date: datetime
    remediated_date: datetime | None = None
    retested: bool = False
    retest_passed: bool = False
 
def calculate_metrics(findings: list[Finding], period_start: datetime, period_end: datetime) -> dict:
    """計算回報期的關鍵指標。"""
    period_findings = [f for f in findings if period_start <= f.found_date <= period_end]
 
    critical_high = [f for f in period_findings if f.severity in ("critical", "high")]
    remediated = [f for f in critical_high if f.remediated_date]
 
    mttr_days = []
    for f in remediated:
        delta = (f.remediated_date - f.reported_date).days
        mttr_days.append(delta)
 
    retested = [f for f in period_findings if f.retested]
    retest_passed = [f for f in retested if f.retest_passed]
 
    return {
        "total_findings": len(period_findings),
        "critical_high": len(critical_high),
        "mttr_critical_high_days": sum(mttr_days) / len(mttr_days) if mttr_days else None,
        "retest_pass_rate": len(retest_passed) / len(retested) if retested else None,
        "open_critical_high": len([f for f in critical_high if not f.remediated_date]),
    }