The architect designs executive-level security dashboards that translate technical metrics into business outcomes. Key metrics include: Detection Coverage (% of MITRE ATT&CK techniques with active detections), MTTD, MTTR, False Positive Rate, Mean Time Between Failures (MTBF) for Splunk infrastructure, and Data Source Health (% of expected sources reporting).
Splunk Glass Tables (ES) and Dashboard Studio enable custom executive dashboards. The architect builds a Security Posture Score — a single composite metric combining detection coverage, data source health, and compliance posture — that gives leadership a single-pane-of-glass view of security program health.