Book Description | Security smarts for the self-guided it professional"an extraordinarily thorough and sophisticated explanation of why you need to measure the effectiveness of your security program and how to do it. A must-have for any quality security program!" -Dave cullinane, cissp, ciso & vp, global fraud, risk & security, how to communicate the value of an information security program, enable investment planning and decision making, and drive necessary change to improve the security of your organization. Security metrics: a beginner's guide explains, step by step, how to develop and implement a successful security metrics program.This practical resource covers project management, communication, analytics tools, identifying targets, defining objectives, obtaining stakeholder buy-in, metrics automation, data quality, and resourcing. You'll also get details on cloud-based security metrics and process improvement. Templates, checklists, and examples give you the hands-on help you need to get started right away.Security metrics: a beginner's guide features:lingo--common security terms defined so that you're in the know on the jobimho--frank and relevant opinions based on the author's years of industry experiencebudget note--tips for getting security technologies and processes into your organization's budgetin actual practice--exceptions to the rules of security explained in real-world contextsyour plan--customizable checklists you can use on the job nowinto action--tips on how, why, and when to apply new skills and techniques at workcaroline wong, has been a featured speaker at rsa, itweb summit, metricon, the executive women's forum, isc2, and the information security forum. |