What is wrong with the way we currently measure and view security • What makes a good and bad metric • How to measure security activities using practical methods and measures • Using data to convey a meaningful message to organisations • An assessment of effective measurement practices in use today