IT Security Metrics: A Practical Framework for Measuring Security & Protecting Data / Edition 1

IT Security Metrics: A Practical Framework for Measuring Security & Protecting Data / Edition 1

by Lance Hayden
     
 

ISBN-10: 0071713409

ISBN-13: 9780071713405

Pub. Date: 06/21/2010

Publisher: McGraw-Hill Professional Publishing

Implement an Effective Security Metrics Project or Program

IT Security Metrics provides a comprehensive approach to measuring risks, threats, operational activities, and the effectiveness of data protection in your organization. The book explains how to choose and design effective measurement strategies and addresses the data requirements of those

…  See more details below

Overview

Implement an Effective Security Metrics Project or Program

IT Security Metrics provides a comprehensive approach to measuring risks, threats, operational activities, and the effectiveness of data protection in your organization. The book explains how to choose and design effective measurement strategies and addresses the data requirements of those strategies. The Security Process Management Framework is introduced and analytical strategies for security metrics data are discussed. You'll learn how to take a security metrics program and adapt it to a variety of organizational contexts to achieve continuous security improvement over time. Real-world examples of security measurement projects are included in this definitive guide.

  • Define security metrics as a manageable amount of usable data
  • Design effective security metrics
  • Understand quantitative and qualitative data, data sources, and collection and normalization methods
  • Implement a programmable approach to security using the Security Process Management Framework
  • Analyze security metrics data using quantitative and qualitative methods
  • Design a security measurement project for operational analysis of security metrics
  • Measure security operations, compliance, cost and value, and people, organizations, and culture
  • Manage groups of security measurement projects using the Security Improvement Program
  • Apply organizational learning methods to security metrics

Product Details

ISBN-13:
9780071713405
Publisher:
McGraw-Hill Professional Publishing
Publication date:
06/21/2010
Pages:
396
Sales rank:
665,806
Product dimensions:
7.30(w) x 9.10(h) x 0.90(d)

Related Subjects

Table of Contents

Part I: Introducing Security Metrics;
Chapter 1. What is A Security Metric?;
Chapter 2. Designing Effective Security Metrics; Chapter 3. Understanding Data;
Case Study I: In Search of Enterprise Metrics;
Part II: Implementing Security Metrics;
Chapter 4. The Security Process Management Framework;
Chapter 5. Analyzing Security Metrics Data;
Chapter 6. Designing the Security Measurement Project;
Case Study II: Normalizing tool data in a security posture assessment;
Part III: Exploring Security Measurement Projects;
Chapter 7. Measuring Security Operations;
Chapter 8. Measuring Compliance and Conformance; Chapter 9. Measuring Security Cost and Value;
Chapter 10. Measuring People, Organizations, and Culture;
Case Study III: Web Application Vulnerabilities;
Part IV: Beyond Security Metrics;
Chapter 11. The Security Improvement Program;
Chaper 12. Learning Security: Different Context for Security Process Management;
Case Study IV: Getting Management Buy-In For a Metrics Program;
Index

Customer Reviews

Average Review:

Write a Review

and post it to your social network

     

Most Helpful Customer Reviews

See all customer reviews >