Throughput

Throughput is the measured rate at which data is successfully delivered from one point to another over a period of time, usually expressed in bits per second. The ISC2 exam outline lists it among the Domain 4 performance metrics, alongside bandwidth, latency, jitter and signal-to-noise ratio. The distinction that matters is capacity against result: bandwidth is how much a link could carry, while throughput is how much it does carry under real conditions. Throughput falls below bandwidth because of protocol overhead, congestion, packet loss and the retransmissions that loss causes, and on long paths because of time spent waiting for acknowledgements. Some sources use the word goodput for the useful application data alone, excluding headers and repeated copies.

Throughput connects to security through availability. A baseline of normal throughput helps an organisation notice a sudden collapse, as in a denial-of-service attack, or an unexpected rise in outbound volume, which can signal data exfiltration. Controls such as quality of service and traffic shaping protect the throughput of critical applications when links are busy.

Exam relevance: questions in this area tend to present related measures and ask which one describes delivered performance. Candidates are expected to keep throughput (what actually arrives) apart from bandwidth (what the link could carry) and latency (how long each unit takes to arrive).