KPI Dashboard
The single screen leadership needs before the next meeting. Risk, Compliance, and Cost — twelve leading indicators, each with a trend graph, sourced from the same data Bsure already collects on your tenant.
It gives IT leadership a 30-second answer to "is this getting better or worse?" — and a clear hand-off into Impact Dashboard when the trend needs to be reversed.
It is designed to answer simple but important questions:
Is the organisation healthier than last quarter — and what's getting worse?
Where is the biggest cost-recovery opportunity in Microsoft 365 licenses?
Are we above the bar on MFA, device compliance, and audit readiness?
Risk
The Risk pillar (#E97132) groups the leading indicators of identity and application exposure.
High-Risk Identities
The number of identities flagged as high risk by Microsoft Entra ID Protection.
What it tells you: the size of your active risk pool — accounts where Microsoft has already flagged elevated likelihood of compromise.
Where to act: investigate in Entra ID Protection; chronic offenders go to the IT Security Manager.
MFA Adoption
The count of users registered for MFA, with the trend over time.
What it tells you: whether your MFA-registration push is moving the needle.
Where to act: pair with the Users without MFA assessment in Impact Dashboard to hand the remaining gaps to the right manager.
Sign-ins without using MFA
Successful sign-ins in the period that did not exercise MFA.
What it tells you: the gap between MFA on paper and MFA in practice.
Where to act: review your conditional-access policy by application.
Risky Applications
Applications flagged by Bsure for elevated permissions, dormant consents, or missing ownership.
What it tells you: which apps in your tenant warrant a closer look from the application owner.
Where to act: drill into Applications and assign an Application Owner to each one.
Compliance
The Compliance pillar groups the lifecycle and device-state indicators auditors ask for.
Inactive Users
Member accounts that haven't signed in for the configured retention period.
What it tells you: the share of your user base no longer using their account — and the licenses still attached to them.
Where to act: delegate the inactive users — consider offboarding assessment in My Organization to HR or the relevant manager.
Inactive Guest Users
Guest accounts that haven't signed in for the retention period.
What it tells you: how much guest access has outlived the project that originally needed it.
Where to act: quarterly review — delegate the guest-review assessments to the inviting business unit.
Stale Windows Devices
Windows devices that haven't reported in for the retention period.
What it tells you: which devices are no longer being managed.
Where to act: retire or rejoin via Intune; the devices need Windows update assessment routes to the right manager.
Non-Compliant Windows Devices
Windows devices that fail Intune compliance policy.
What it tells you: the device-side gap auditors will ask about.
Where to act: review against your conditional-access policy; pair with audit-prep.
Cost
The Cost pillar groups the recoverable license spend.
Microsoft 365 Potential Cost Savings (monthly)
Total recoverable monthly cost across unassigned, inactive, and disabled licenses.
What it tells you: the headline savings number, sourced from real usage data, ready for the renewal conversation.
Where to act: delegate the save by removing unused accounts assessment in My Organization so the saving lands as a Finance-visible action before renewal.
Unassigned Microsoft 365 Licenses (monthly)
Licenses paid for and not assigned to any user.
What it tells you: the line-item easiest to drop at renewal.
Where to act: reduce the license count at the next renewal cycle.
Inactive Users Microsoft 365 license value (monthly)
The monthly cost of licenses held by users who haven't signed in for the retention period.
What it tells you: the savings tied to offboarding inactive users.
Where to act: offboard or downgrade; the cost number tells you what's at stake.
Disabled Users Microsoft 365 license value (monthly)
The monthly cost of licenses still held by disabled accounts.
What it tells you: paperwork debt — license cost on accounts already turned off.
Where to act: remove the licenses; there's no functional impact.
Trend graphs
Every card ships with a trend graph. The trend, not the absolute value, is the leadership signal — two organisations of the same size can have very different absolute MFA Adoption counts; what matters is direction.
In leadership meetings: open with the trend, then quote the absolute for context.
From a KPI to a delegation
When a number moves in the wrong direction, Impact Dashboard breaks the same data into named, owned assessments. Delegate each one to the right person; the trend reverses on the next cycle.
A note on the Time pillar. Bsure's value system has four pillars (Money, Time, Risk, Compliance) and the KPI Dashboard groups three (Risk, Compliance, Cost). Time value lives in the delegation workflow itself — every assessment that moves from IT's queue to a named owner is Time value, captured downstream rather than on a card here.
Key takeaway
One screen. Three pillars. Twelve numbers. The trend on every card.
Used together with Impact Dashboard, it turns leadership focus into distributed accountability across the business.
Last updated
Was this helpful?