Problem solve Get help with specific problems with your technologies, process and projects.

Metrics: Practical ways to measure security success

In this presentation you'll learn practical ways to introduce metrics into your own organization.

This presentation by Pete Lindstrom, Research Director for Spire Security, was given at Information Security Decisions Spring 2005.

Today, security is more of an art form than scientific endeavor. We are stuck with perceptions of "good security" and "bad security" that revolve around possibility and paranoia rather than in-depth analysis. Meanwhile, security professionals need to operate as a business unit within an organization and produce "results" -- whatever they may mean.

Rather than trying to measure security in the abstract, Pete Lindstrom, Research Director for Spire Security, argues that security managers should first align security with business goals, and then measure progress toward those goals. In this presentation, Lindstrom discusses the practical approaches to meaningful security metrics, and shows how security managers can demonstrate risk reduction efficiency -- and effectiveness -- through goal-oriented metrics. You discover:

  • A framework for security metrics that you can employ right away
  • Insight into the types of metrics available to a variety of security practitioners
  • Practical ways to introduce metrics into your own organization

View the presentation

Visit the metrics and measurement resource center

This was last published in May 2005

Dig Deeper on Risk assessments, metrics and frameworks

Start the conversation

Send me notifications when other members comment.

Please create a username to comment.