Information Security Effectiveness Metrics: What Metrics ...

IBM Global ServicesSecurity & Privacy ServicesInformation Security EffectivenessInformation Security EffectivenessMetrics: what Metrics ? what Role for Metrics ? Metrics : what Metrics ? what Role for Metrics ?MatundaNyanchama, PhD, CISSPN ational Leader, Security & Privacy Delivery ServicesIBM Global Services, CanadaE-mail: & PrivacyIBM Global ServicesNovember 21, 2004 November 21, 200422 Copyright IBM Global ServicesCopyright IBM Global ServicesAgendaAgenda Background Some Definitions Why Metrics ? IS Metrics -Background Value Information Security Metrics Metrics Development Process Scope of Measurement ISO 17799 Scoping out IS Metrics Information Security Program Example Scope of Considerations for Measurement Examples of Measures Metrics & Reporting Data Sources for IS Metrics IS Metrics Process & Reporting Metrics Breadth, Depth & Purpose Incident management Example Sample IS Dashboard State of IS Metrics & Caveats & Some Suggestions SummarySecurity & PrivacyIBM Global ServicesNovember 21, 2004 November 21, 200433 Copyright IBM Global ServicesCopyright IBM Global ServicesSome DefinitionsSome Definitions Metric: relating to measurement; involving, or proceeding by, measurement (Webster s Revised Unabridged Dictionary) Information Security pertains to integrity, confidentiality& availability;auditabilityandaccountabili ty

The IS Management Life Cycle. Maintain & Improve Security Management Program Monitor & Continuously Review Program Performance Establish Information

Loading..

Tags:

  Information, What, Security, Management, Effectiveness, Metrics, Information security effectiveness metrics, What metrics

Information

Related search queries