Information Security Effectiveness Metrics: What …

← Back to document page

IBM Global ServicesSecurity & Privacy ServicesInformation Security EffectivenessInformation Security EffectivenessMetrics: what metrics ? what Role for metrics ? metrics : what metrics ? what Role for metrics ?MatundaNyanchama, PhD, CISSPNational Leader, Security & Privacy Delivery ServicesIBM Global Services, CanadaE-mail: & PrivacyIBM Global ServicesNovember 21, 2004November 21, 200422Copyright IBM Global ServicesCopyright IBM Global ServicesAgendaAgenda Background Some Definitions Why metrics ? IS metrics -Background Value Information Security metrics metrics Development Process Scope of Measurement ISO 17799 Scoping out IS metrics Information Security Program Example Scope of Considerations for Measurement Examples of Measures metrics & Reporting Data Sources for IS metrics IS metrics Process & Reporting metrics Breadth, Depth & Purpose Incident management Example Sample IS Dashboard State of IS metrics & Caveats & Some Suggestions SummarySecurity & PrivacyIBM Global ServicesNovember 21, 2004November 21, 200433Copyright IBM Global ServicesCopyright IBM Global ServicesSome DefinitionsSome Definitions Metric: relating to measurement; involving, or proceeding by, measurement (Webster s Revised Unabridged Dictionary) Informati

The IS Management Life Cycle. Maintain & Improve Security Management Program Monitor & Continuously Review Program Performance Establish Information

  Information, What, Security, Management, Effectiveness, Metrics, Security management, Information security effectiveness metrics