This presentation by Pete Lindstrom, Research Director for Spire Security, was given at Information Security Decisions Spring 2005.
Today, security is more of an art form than scientific endeavor. We are stuck with perceptions
Requires Free Membership to View
SearchSecurity.com members gain immediate and unlimited access to breaking industry news, virus alerts, new hacker threats, highly focused security newsletters, and more -- all at no cost. Join me on SearchSecurity.com today!
Michael S. Mimoso, Editorial Director
of "good security" and "bad security" that revolve around possibility and paranoia rather than in-depth analysis. Meanwhile, security professionals need to operate as a business unit within an organization and produce "results" -- whatever they may mean. Rather than trying to measure security in the abstract, Pete Lindstrom, Research Director for Spire Security, argues that security managers should first align security with business goals, and then measure progress toward those goals. In this presentation, Lindstrom discusses the practical approaches to meaningful security metrics, and shows how security managers can demonstrate risk reduction efficiency -- and effectiveness -- through goal-oriented metrics. You discover:
- A framework for security metrics that you can employ right away
- Insight into the types of metrics available to a variety of security practitioners
- Practical ways to introduce metrics into your own organization
View the presentation
Visit the metrics and measurement resource center
This was first published in May 2005