Enterprise Security Metrics 1
(1 votes, average: 5 out of 5)
Loading ...Business IntelligenceTopic: Security Dashboard Metrics & KPIs. Security activities can be hard to quantify - making it difficult to track with KPIs and metrics. In Part 1 of this interview with Andrew Jaquith (Security Expert from the Yankee Group), they examine the use of metrics in quantifying and measuring enterprise information technology security operations. In the Dashboards by Example blog, we’ve looked at security dashboards such as:
Security Operations Center Dashboard
Threat Management Levels Dashboard
Network Security Executive Dashboard
Andrew Jaquith is the author of Security Metrics: Replacing Fear, Uncertainty, and Doubt
Here is the blurb from the publisher:
Security Metrics is the first comprehensive best-practice guide to defining, creating, and utilizing security metrics in the enterprise.
Using sample charts, graphics, case studies, and war stories, Yankee Group Security Expert Andrew Jaquith demonstrates exactly how to establish effective metrics based on your organization’s unique requirements. You’ll discover how to quantify hard-to-measure security activities, compile and analyze all relevant data, identify strengths and weaknesses, set cost-effective priorities for improvement, and craft compelling messages for senior management.
Security Metrics successfully bridges management’s quantitative viewpoint with the nuts-and-bolts approach typically taken by security professionals. It brings together expert solutions drawn from Jaquith’s extensive consulting work in the software, aerospace, and financial services industries, including new metrics presented nowhere else. You’ll learn how to:
- Replace nonstop crisis response with a systematic approach to security improvement
- Understand the differences between “good” and “bad” metrics
- Measure coverage and control, vulnerability management, password quality, patch latency, benchmark scoring, and business-adjusted risk
- Quantify the effectiveness of security acquisition, implementation, and other program activities
- Organize, aggregate, and analyze your data to bring out key insights
- Use visualization to understand and communicate security issues more clearly
- Capture valuable data from firewalls and antivirus logs, third-party auditor reports, and other resources
Implement balanced scorecards that present compact, holistic views of organizational security effectiveness
RSS
RSS feed for comments on this post
Share your comments