Information Security Effectiveness Metrics: What …

IBM Global ServicesSecurity & Privacy ServicesInformation Security EffectivenessInformation Security EffectivenessMetrics: what metrics ? what Role for metrics ? metrics : what metrics ? what Role for metrics ?MatundaNyanchama, PhD, CISSPN ational Leader, Security & Privacy Delivery ServicesIBM Global Services, CanadaE-mail: & PrivacyIBM Global ServicesNovember 21, 2004 November 21, 200422 Copyright IBM Global ServicesCopyright IBM Global ServicesAgendaAgenda Background Some Definitions Why metrics ? IS metrics -Background Value Information Security metrics metrics Development Process Scope of Measurement ISO 17799 Scoping out IS metrics Information Security Program Example Scope of Considerations for Measurement Examples of Measures metrics & Reporting Data Sources for IS metrics IS metrics Process & Reporting metrics Breadth, Depth & Purpose Incident Management Example Sample IS Dashboard State of IS metrics & Caveats & Some Suggestions SummarySecurity & PrivacyIBM Global ServicesNovember 21, 2004 November 21, 200433 Copyright IBM Global ServicesCopyright IBM Global ServicesSome DefinitionsSome Definitions Metric: relating to measurement; involving, or proceeding by, measurement (Webster s Revised Unabridged Dictionary) Information Security pertains to integrity, confidentiality& availability;auditabilityandaccountabili ty Security Metric: A measurable attribute of the result of a Security engineering process that could

IBM Global Services Security & Privacy Services Information Security Effectiveness Metrics: What Metrics? What Role for Metrics? Matunda Nyanchama, PhD, CISSP

Loading..

Tags:

  Information, What, Security, Effectiveness, Metrics, Information security effectiveness metrics

Information

Related search queries