Understanding Security Metrics to Drive Business and Security Results

No ratings

Presented at CISONewJersey 2012 by

Jennifer Bayuk

In striving to better align with the business, CISOs are finding metrics to be valuable tools in achieving the difficult task of translating complicated information in a way that clearly presents the value and necessity of enterprise security. Join Jennifer Bayuk, program director of systems security engineering at the Stevens Institute of Technology, as she shares her research from working with CISOs across the country to establish information security best practices. Session discovery topics: Leveraging metrics to drive security and business results insights into the wide variety of approaches, measurements and characterizations The contextual value in metrics designed to show the efficacy of a security program Risk management metrics versus remediation metrics optimizing the use of each