Gathering Security Metrics and Reaping the Rewards
This paper deals with the importance of using objective measurement to manage security improvements and to steer an information security program. It outlines the best way to design and produce a comprehensive security metrics program. It also describes how to leverage that effort within an...