Book's Name : IT Security Metrics
Author : Lance Hayden
Publisher : Tata McGraw-Hill
This book provides a comprehensive approach to measuring risks, threats, operational activities and the effectiveness of data protection in your organization. This book explains how to choose and design effective measurement strategies and addresses the data requirements of those strategies. The Security Process Management Framework is introduced and analytical strategies for security metrics data are discussed. This book is also about the process of measurement as much as it is about metrics themselves.
As the security industry (and profession) matures, and as security is recognized as a core business process, the need for effective measurement of that process is growing. The IT security metrics movement is growing as well, in response to this need. This book is intended to contribute to the ongoing conversation about security measurement and to help you understand how to put metrics to effective use within your organization.
