Publisher: Addison-Wesley, 2007, 306 pages
Keywords: Information Security
Security Metrics is the first comprehensive best-practice guide to defining, creating, and utilizing security metrics in the enterprise.
Using sample charts, graphics, case studies, and war stories, Yankee Group Security Expert Andrew Jaquith demonstrates exactly how to establish effective metrics based on your organization's unique requirements. You'll discover how to quantify hard-to-measure security activities, compile and analyze all relevant data, identify strengths and weaknesses, set cost-effective priorities for improvement, and craft compelling messages for senior management.
Security Metrics successfully bridges management's quantitative viewpoint with the nuts-and-bolts approach typically taken by security professionals. It brings together expert solutions drawn from Jaquith's extensive consulting work in the software, aerospace, and financial services industries, including new metrics presented nowhere else. You'll learn hot to:
A long-needed book for security professionals.
The security professionals have too long been running around and tried to scare people with emotional appeals. This book gives a more business oriented view of security, by showing how to both measure it and how to present it.
The connection to BSC is an excellent add-on, which would make it acceptable to the most hard-nosed senior executives.
Strongly recommended for security professionals, especially if you don't have a degree in management.