Network Security Metrics – Which Matter, Which Can Be Measured?

No ratings

Presented at AusCERT 2014 by

Roger Whitely

Successful organizations run on key metrics and IT security should be no different. But which security metrics should operations, management and boardrooms be focused on? Factories focus on “days without an accident” Is the cyber parallel “days without a breach?” What to measure, how to measure, and how to communicate performance is key to improving the security team’s effectiveness and standing within the organization. Information like: - Which departments have access to which servers? - Who are the privileged users and when are they most active? - Where are the assets with vulnerabilities that can be reached from outside? - When are security defenses like firewalls likely to maxout? Join Roger Whitely, APAC Technical Director from FireMon, for key results of a new Ponemon Institute research study on security metrics and change management, and a pragmatic perspective on generating actionable metrics from your network security infrastructure to reduce risks from relentless change.