Search -
Security Metrics: Replacing Fear, Uncertainty, and Doubt
Security Metrics Replacing Fear Uncertainty and Doubt Author:Andrew Jaquith Foreword Preface Chapter 1 Introduction: Escaping the Hamster Wheel of Pain Chapter 2 Defining Security Metrics Chapter 3 Diagnosing Problems and Measuring Technical Security Chapter 4 Measuring Program Effectiveness Chapter 5 Analysis Techniques Chapter 6 Visualization Chapter 7 Automa... more »ting Metrics Calculations Chapter 8 Designing Security Scorecards Index The Definitive Guide to Quantifying, Classifying, and Measuring Enterprise IT Security OperationsSecurity Metrics is the first comprehensive best-practice guide to defining, creating, and utilizing security metrics in the enterprise. Using sample charts, graphics, case studies, and war stories, Yankee Group Security Expert Andrew Jaquith demonstrates exactly how to establish effective metrics based on your organization’s unique requirements. You’ll discover how to quantify hard-to-measure security activities, compile and analyze all relevant data, identify strengths and weaknesses, set cost-effective priorities for improvement, and craft compelling messages for senior management. Security Metrics successfully bridges management’s quantitative viewpoint with the nuts-and-bolts approach typically taken by security professionals. It brings together expert solutions drawn from Jaquith’s extensive consulting work in the software, aerospace, and financial services industries, including new metrics presented nowhere else. You’ll learn how to
Replace nonstop crisis response with a systematic approach to security improvement
Understand the differences between ?good? and ?bad? metrics
Measure coverage and control, vulnerability management password quality, patch latency, benchmark scoring, and business-adjusted risk
Quantify the effectiveness of security acquisition, implementation, and other program activities
Organize, aggregate, and analyze your data to bring out key insights
Use visualization to understand and communicate security issues more clearly
Capture valuable data from firewall and antivirus logs, third-party auditor reports, and other resources
Implement balanced scorecards that present compact, holistic views of organizational security effectiveness
Whether you’re an engineer or consultant who must ensure security and report to management about it?or an executive who needs better information for decision-making?Security Metrics is the resource you have been searching for.« less