Implementing Effective Security Metrics Project or Program IT Security Metrics provide a comprehensive approach to measuring risk, threat, operational activities, and effectiveness of data protection in your organization. Determine metrics for security as a manageable amount of data that can be used design an effective security metrics Understanding quantitative and qualitative data, data sources and collection methods and normalization Applying programmable approach to security using the Security Management Process Framework security metric data analysis using quantitative methods and qualitative design project security measures for the analysis of Measure operational security metrics security operations, compliance, cost and value, and the people, organizations, and cultural Manage security measurement project group using the Security Improvement Program Apply organizational learning method for security metrics