It Security Metrics: A Practical Framework for Measuring Security & Protecting Data

Lance Hayden

ISBN 10: 0071713409 / ISBN 13: 9780071713405

Published by Mcgraw Hill LLC Jul 2010, 2010

About this Item

This item is printed on demand - it takes 3-4 days longer - Neuware -Implement an Effective Security Metrics Project or ProgramIT Security Metrics provides a comprehensive approach to measuring risks, threats, operational activities, and the effectiveness of data protection in your organization. The book explains how to choose and design effective measurement strategies and addresses the data requirements of those strategies. The Security Process Management Framework is introduced and analytical strategies for security metrics data are discussed. You'll learn how to take a security metrics program and adapt it to a variety of organizational contexts to achieve continuous security improvement over time. Real-world examples of security measurement projects are included in this definitive guide.Define security metrics as a manageable amount of usable dataDesign effective security metricsUnderstand quantitative and qualitative data, data sources, and collection and normalization methodsImplement a programmable approach to security using the Security Process Management FrameworkAnalyze security metrics data using quantitative and qualitative methodsDesign a security measurement project for operational analysis of security metricsMeasure security operations, compliance, cost and value, and people, organizations, and cultureManage groups of security measurement projects using the Security Improvement ProgramApply organizational learning methods to security metrics 396 pp. Englisch.

Seller Inventory # 9780071713405

Bibliographic Details

• Title: It Security Metrics: A Practical Framework for Measuring Security & Protecting Data
• Publisher: Mcgraw Hill LLC Jul 2010
• Publication Date: 2010
• Language: English
• ISBN 10: 0071713409
• ISBN 13: 9780071713405
• Binding: Taschenbuch
• Condition: Neu
• Dimensions: 231W x 187H x 23D millimeters 231 millimeters width by 187 millimeters height by 23 millimeters depth
• Weight: 678 grams

About this title

Synopsis

Publisher's Note: Products purchased from Third Party sellers are not guaranteed by the publisher for quality, authenticity, or access to any online entitlements included with the product.

Implement an Effective Security Metrics Project or Program

IT Security Metrics provides a comprehensive approach to measuring risks, threats, operational activities, and the effectiveness of data protection in your organization. The book explains how to choose and design effective measurement strategies and addresses the data requirements of those strategies. The Security Process Management Framework is introduced and analytical strategies for security metrics data are discussed. You'll learn how to take a security metrics program and adapt it to a variety of organizational contexts to achieve continuous security improvement over time. Real-world examples of security measurement projects are included in this definitive guide.

• Define security metrics as a manageable amount of usable data
• Design effective security metrics
• Understand quantitative and qualitative data, data sources, and collection and normalization methods
• Implement a programmable approach to security using the Security Process Management Framework
• Analyze security metrics data using quantitative and qualitative methods
• Design a security measurement project for operational analysis of security metrics
• Measure security operations, compliance, cost and value, and people, organizations, and culture
• Manage groups of security measurement projects using the Security Improvement Program
• Apply organizational learning methods to security metrics

About the Author

Lance Hayden, Ph.D., CISSP, CISM, is a Solutions Architect and Information Scientist with Cisco System's World Wide Security Practice where he helps Cisco's customers make informed decisions about their security operations. In addition to his private sector experience, he teaches at the University of Texas and is a former HUMINT officer with the Central Intelligence Agency.