Definitely Guide to Quantifying, Classification, and Measuring Enterprise IT Security Operations Security Metrics is the first comprehensive best-practice guide to defining, creating, and using security metrics in the company. Using sample charts, graphics, case studies, and war stories, Yankee Group Security Expert Andrew Jaquith show you exactly how to establish effective metrics based on your organization's unique needs?. Security Metrics successfully bridges management? S quantitative viewpoint with the nuts-and-bolts approach typically taken by security professionals. ? You will learn how to: ? Measuring the effectiveness of security acquisition, implementation, and other program activities ? Use visualization to understand and communicate security issues more clearly ? Implement balanced scorecards that present compact, holistic views of organizational security effectiveness Do you? Return an engineer or consultant responsible for security and reporting to management make? Or an executive who most need information for decision-.? Security Metrics is the resource you have been looking for Andrew Jaquith, Yankee Group program manager? Security Solutions and Services Decision Service, advised corporate clients to prioritize and manage security resources. His application security and metrics research has been featured in CIO, CSO, InformationWeek, IEEE Security and Privacy, and The Economist. Preface Preface Acknowledgments About the Author Chapter 1 Introduction: Escaping Hamster Wheel of Pain Chapter 2 Defining Security Metrics Chapter 3 Diagnosis of Problems and Measuring Technical Security Chapter 4 Measuring Program Effectiveness Chapter 5 Analysis Techniques Chapter 6 Visualization Chapter 7 Automating Metrics Calculation Chapter 8 Designing Security Scorecards Index