Metrics: Practical ways to measure security success

In this presentation you'll learn practical ways to introduce metrics into your own organization.

This presentation by Pete Lindstrom, Research Director for Spire Security, was given at Information Security Decisions Spring 2005.


Today, security is more of an art form than scientific endeavor. We are stuck with perceptions of "good security" and "bad security" that revolve around possibility and paranoia rather than in-depth analysis. Meanwhile, security professionals need to operate as a business unit within an organization and produce "results" -- whatever they may mean.

Rather than trying to measure security in the abstract, Pete Lindstrom, Research Director for Spire Security, argues that security managers should first align security with business goals, and then measure progress toward those goals. In this presentation, Lindstrom discusses the practical approaches to meaningful security metrics, and shows how security managers can demonstrate risk reduction efficiency -- and effectiveness -- through goal-oriented metrics. You discover:

  • A framework for security metrics that you can employ right away
  • Insight into the types of metrics available to a variety of security practitioners
  • Practical ways to introduce metrics into your own organization

View the presentation

Visit the metrics and measurement resource center


This was first published in May 2005

Dig deeper on Enterprise Risk Management: Metrics and Assessments

Pro+

Features

Enjoy the benefits of Pro+ membership, learn more and join.

0 comments

Oldest 

Forgot Password?

No problem! Submit your e-mail address below. We'll send you an email containing your password.

Your password has been sent to:

-ADS BY GOOGLE

SearchCloudSecurity

SearchNetworking

SearchCIO

SearchConsumerization

SearchEnterpriseDesktop

SearchCloudComputing

ComputerWeekly

Close