The ART of Security Context: Metrics without Meaning are Useless

No ratings

Presented at CISOToronto 2012 by

David Oberry

Reporting on your individual area, on individual processes, and on individual products doesnt always provide you with the kind of information you need. The latest scan may show that 99.9% of your assets are not at risk to the latest threat; however, what the report may not tell you is that this percentage is only valid for the assets you know about. Instead of the same old less than effective approach, what if you can change the game? Going forward, metrics that provide valid context for analysis are the only thing that will separate security organizations which are status quo budget items from true innovative enablers of the business.