Security Metrics, A Beginners Guide

Overview

Table of contents

Part I: Why Security Metrics?
1 Why Measure Security?
2 Why Now? Volumes, Bots
Part II: Essential Components of an Effective Security Metrics Practitioner
3 Analytics
4 Discipline, Commitment, Project Management
Part III: Decide What to Measure
5 Core Competencies
6 Identify Targets
Part IV: Get Started
7 Define Objectives / Goals
8 Define Your Priorities
9 Identify Key Messages for Key Audiences
10 Obtain Buy-In from Stakeholders and Commit to Timelines
Part V: Toolkit
11 Center for Information Security (CIS) Consensus Metrics Definitions
12 Case Study and Analysis Technology Samples
Part VI: Creating the Best Environment for Healthy Metrics
13 Define a Communications Strategy
14 Create and Drive an Action Plan: The Importance of Project Management
Part VII: Secret Sauce: Lessons Learned from an Enterprise Practitioner
15 Enhance Process Optimization and Data Quality
16 Fix Broken Processes Before Automation
17 Leverage Politics and Competition
Part VIII: Appendices
Appendix A Glossary of Terms
Appendix B Checklists
Appendix C Templates