It security metrics: a practical framework for measuring security & protecting data
- New Jersey McGraw-Hill 2010
- 368 p.
Contiene: I. Introducing security metrics: 1. What is a Security metric.- 2. Designing effective security metrics.- 3. Understanding data.-- II. Implementing security metrics: 4. The security process management framework.- 5. Analyzing security metrics data.- 6. Designing the security measurement project.-- III. Exploring security measurement projects: 7. Measuring security operations.- 8. Measuring compliance and conformance.- 9. Measuring security cost and value.- 10. Measuring people, organizations, and culture.-- IV. Beyond security metrics: 11. The security improvement program.- 12. Learning security, different contexts for security process management.- case study 4: getting management buy-in for the security metrics program.