Calculating Duration of each Service or Critical Service

This choice will depend on the business objectives and complexity of measurement, but in most cases, organizations consider only critical services for such KPI (measuring noncritical services only adds effort without bigger benefits).

Regarding calculation, in general, it is considered the total sum of interruption times in a given period (e.g., day, week, month, etc.), where the downtime periods are monitored either by monitoring systems or by reports sent by users. Both approaches have their advantages and disadvantages, which should be evaluated considering the business context.

This article will provide you a further explanation about monitoring:

• How to perform monitoring and measurement in ISO 27001 https://advisera.com/27001academy/blog/2015/06/08/how-to-perform-monitoring-and-measurement-in-iso-27001/

These materials will also help you regarding monitoring:

• Book Secure & Simple: A Small-Business Guide to Implementing ISO 27001 On Your Own https://advisera.com/books/secure-and-simple-a-small-business-guide-to-implementing-iso-27001-on-your-own/
• Free online training ISO 27001 Foundations Course https://advisera.com/training/iso-27001-foundations-course/