Security Metrics Management: How to Manage the Costs of an Assets Protection Program

by Gerald L. Kovacich CFE, CPP, CISSP

Overview

Security metrics is the application of quantitative, statistical, and/or mathematical analyses to measuring security functional trends and workload. In other words, tracking what each function is doing in terms of level of effort (LOE), costs, and productivity. Security metrics management is the managing of an assets protection program and related security functions through the use of metrics. It can be used where managerial tasks must be supported for such purposes as supporting the security professional’s position on budget matters, justifying the cost-effectiveness of decisions, determining the impact of downsizing on service and support to customers, etc. Security Metrics Management is designed to provide basic guidance to security professionals so that they can measure the costs of their assets protection program - their security program - as well as its successes and failures. It includes a discussion of how to use the metrics to brief management, justify budget and use trend analyses to develop a more efficient and effective assets protection program.

Product Details

ISBN-13:	9780750678995
Publisher:	Elsevier Science
Publication date:	11/30/2005
Edition description:	Older Edition
Pages:	352
Product dimensions:	7.25(w) x 10.25(h) x (d)

About the Author

Dr. Gerald L. Kovacich has more than 40 years of experience in industrial, business and government security, investigations, information systems security, and information warfare, both in the U.S. Government as a special agent, in international corporations, and subsequently as an international consultant and lecturer. He retired as the Information Warfare Technologist, Northrop Grumman Corporation to pursue a career as an international consultant, lecturer and writer.

Table of Contents

Section I: Introduction to the Role of the Security Professionals and Security Metrics ManagementChapter 1: The Security Profession and Its Role in Supporting Business and Government Agency Assets Protection Needs Chapter 2: Management and a Security Metrics FoundationChapter 3: Policies, Procedures, Processes, Plans, and ProjectsChapter 4: Security Metrics Management Program – An OverviewChapter 5: Case Study: Measuring Costs of SecurityChapter 6: Case Study: Six Sigma Section II: Administrative SecurityChapter 7: Information SecurityChapter 8: Personnel SecurityChapter 9: Security Education & Awareness TrainingChapter 10: Security Compliance AuditsChapter 11: Surveys and Risk Management Chapter 12: Corporate Assets Protection ProgramChapter 13: Contingency PlanningSection III: Physical SecurityChapter 14: Guard ForceChapter 15: Technical Security SystemsChapter 16: Locks and KeysChapter 17: Fire ProtectionChapter 18: Executive ProtectionChapter 19: Event Security Section IV: Security OperationsChapter 20: Investigations & Non-Compliance InquiriesChapter 21: Government SecurityChapter 22: Information Systems SecurityChapter 23: Mergers & Acquisitions SecurityChapter 24: OutsourcingSection V: The Security Profession and Metrics Management in the Future Chapter 25: Preparing Now to Support Future Business NeedsChapter 26: Security Metrics Management Technology of the Future and How to Prepare Now to Use It

What People are Saying About This

From the Publisher

Provides guidance on measuring the costs, successes and failures of asset protection and security programs