# KPI Dashboard The single screen leadership needs before the next meeting. Risk, Compliance, and Cost — twelve leading indicators, each with a trend graph, sourced from the same data Bsure already collects on your tenant. It gives IT leadership a 30-second answer to *"is this getting better or worse?"* — and a clear hand-off into [Impact Dashboard](/user-guides/impact-dashboard.md) when the trend needs to be reversed. It is designed to answer simple but important questions: * Is the organisation healthier than last quarter — and what's getting worse? * Where is the biggest cost-recovery opportunity in Microsoft 365 licenses? * Are we above the bar on MFA, device compliance, and audit readiness? *** ## Risk The Risk pillar (`#E97132`) groups the leading indicators of identity and application exposure. ### High-Risk Identities The number of identities flagged as high risk by Microsoft Entra ID Protection. * **What it tells you:** the size of your active risk pool — accounts where Microsoft has already flagged elevated likelihood of compromise. * **Where to act:** investigate in Entra ID Protection; chronic offenders go to the IT Security Manager. ### MFA Adoption The count of users registered for MFA, with the trend over time. * **What it tells you:** whether your MFA-registration push is moving the needle. * **Where to act:** pair with the *Users without MFA* assessment in [Impact Dashboard](/user-guides/impact-dashboard.md) to hand the remaining gaps to the right manager. ### Sign-ins without using MFA Successful sign-ins in the period that did not exercise MFA. * **What it tells you:** the gap between MFA on paper and MFA in practice. * **Where to act:** review your conditional-access policy by application. ### Risky Applications Applications flagged by Bsure for elevated permissions, dormant consents, or missing ownership. * **What it tells you:** which apps in your tenant warrant a closer look from the application owner. * **Where to act:** drill into [Applications](/user-guides/applications.md) and assign an [Application Owner](/user-guides/impact-dashboard/application-owner.md) to each one. *** ## Compliance The Compliance pillar groups the lifecycle and device-state indicators auditors ask for. ### Inactive Users Member accounts that haven't signed in for the configured retention period. * **What it tells you:** the share of your user base no longer using their account — and the licenses still attached to them. * **Where to act:** delegate the *inactive users — consider offboarding* assessment in [My Organization](/user-guides/impact-dashboard/my-organization.md) to HR or the relevant manager. ### Inactive Guest Users Guest accounts that haven't signed in for the retention period. * **What it tells you:** how much guest access has outlived the project that originally needed it. * **Where to act:** quarterly review — delegate the guest-review assessments to the inviting business unit. ### Stale Windows Devices Windows devices that haven't reported in for the retention period. * **What it tells you:** which devices are no longer being managed. * **Where to act:** retire or rejoin via Intune; the *devices need Windows update* assessment routes to the right manager. ### Non-Compliant Windows Devices Windows devices that fail Intune compliance policy. * **What it tells you:** the device-side gap auditors will ask about. * **Where to act:** review against your conditional-access policy; pair with audit-prep. *** ## Cost The Cost pillar groups the recoverable license spend. ### Microsoft 365 Potential Cost Savings (monthly) Total recoverable monthly cost across unassigned, inactive, and disabled licenses. * **What it tells you:** the headline savings number, sourced from real usage data, ready for the renewal conversation. * **Where to act:** delegate the *save by removing unused accounts* assessment in [My Organization](/user-guides/impact-dashboard/my-organization.md) so the saving lands as a Finance-visible action before renewal. ### Unassigned Microsoft 365 Licenses (monthly) Licenses paid for and not assigned to any user. * **What it tells you:** the line-item easiest to drop at renewal. * **Where to act:** reduce the license count at the next renewal cycle. ### Inactive Users Microsoft 365 license value (monthly) The monthly cost of licenses held by users who haven't signed in for the retention period. * **What it tells you:** the savings tied to offboarding inactive users. * **Where to act:** offboard or downgrade; the cost number tells you what's at stake. ### Disabled Users Microsoft 365 license value (monthly) The monthly cost of licenses still held by disabled accounts. * **What it tells you:** paperwork debt — license cost on accounts already turned off. * **Where to act:** remove the licenses; there's no functional impact. *** ## Trend graphs Every card ships with a trend graph. The trend, not the absolute value, is the leadership signal — two organisations of the same size can have very different absolute MFA Adoption counts; what matters is direction. In leadership meetings: open with the trend, then quote the absolute for context. *** ## From a KPI to a delegation When a number moves in the wrong direction, [Impact Dashboard](/user-guides/impact-dashboard.md) breaks the same data into named, owned assessments. Delegate each one to the right person; the trend reverses on the next cycle. {% hint style="info" %} **A note on the Time pillar.** Bsure's value system has four pillars (Money, Time, Risk, Compliance) and the KPI Dashboard groups three (Risk, Compliance, Cost). Time value lives in the delegation workflow itself — every assessment that moves from IT's queue to a named owner is Time value, captured downstream rather than on a card here. {% endhint %} *** ## Key takeaway One screen. Three pillars. Twelve numbers. The trend on every card. Used together with [Impact Dashboard](/user-guides/impact-dashboard.md), it turns leadership focus into distributed accountability across the business. --- # Agent Instructions: Querying This Documentation If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question. Perform an HTTP GET request on the current page URL with the `ask` query parameter: ``` GET https://docs.bsure.io/user-guides/impact-dashboard/kpi-dashboard.md?ask= ``` The question should be specific, self-contained, and written in natural language. The response will contain a direct answer to the question and relevant excerpts and sources from the documentation. Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.