Security Metrics: Replacing Fear, Uncertainty, and Doubt by Andrew Jaquith
Security Metrics: Replacing Fear, Uncertainty, and Doubt by Andrew Jaquith PDF, ePub eBook D0wnl0ad
<>The Definitive Guide to Quantifying, Classifying, and Measuring Enterprise IT Security Operations
Security Metrics is the first comprehensive best-practice guide to defining, creating, and utilizing security metrics in the enterprise.
Using sample charts, graphics, case studies, and war stories, Yankee Group Security Expert Andrew Jaquith demonstrates exactly how to establish effective metrics based on your organization’s unique requirements. You’ll discover how to quantify hard-to-measure security activities, compile and analyze all relevant data, identify strengths and weaknesses, set cost-effective priorities for improvement, and craft compelling messages for senior management.
Security Metrics successfully bridges management’s quantitative viewpoint with the nuts-and-bolts approach typically taken by security professionals. It brings together expert solutions drawn from Jaquith’s extensive consulting work in the software, aerospace, and financial services industries, including new metrics presented nowhere else. You’ll learn how to:
• Replace nonstop crisis response with a systematic approach to security improvement
• Understand the differences between “good” and “bad” metrics
• Measure coverage and control, vulnerability management, password quality, patch latency, benchmark scoring, and business-adjusted risk
• Quantify the effectiveness of security acquisition, implementation, and other program activities
• Organize, aggregate, and analyze your data to bring out key insights
• Use visualization to understand and communicate security issues more clearly
• Capture valuable data from firewalls and antivirus logs, third-party auditor reports, and other resources
• Implement balanced scorecards that present compact, holistic views of organizational security effectiveness
Whether you’re an engineer or consultant responsible for security and reporting to management–or an executive who needs better information for decision-making–Security Metrics is the resource you have been searching for.
Andrew Jaquith, program manager for Yankee Group’s Security Solutions and Services Decision Service, advises enterprise clients on prioritizing and managing security resources. He also helps security vendors develop product, service, and go-to-market strategies for reaching enterprise customers. He co-founded @stake, Inc., a security consulting pioneer acquired by Symantec Corporation in 2004. His application security and metrics research has been featured in CIO, CSO, InformationWeek, IEEE Security and Privacy, and The Economist.
Foreword
Preface
Acknowledgments
About the Author
Chapter 1 Introduction: Escaping the Hamster Wheel of Pain
Chapter 2 Defining Security Metrics
Chapter 3 Diagnosing Problems and Measuring Technical Security
Chapter 4 Measuring Program Effectiveness
Chapter 5 Analysis Techniques
Chapter 6 Visualization
Chapter 7 Automating Metrics Calculations
Chapter 8 Designing Security Scorecards
Index
From reader reviews:
Dorothy Marr:
The experience that you get from Security Metrics: Replacing Fear, Uncertainty, and Doubt may be the more deep you searching the information that hide inside the words the more you get enthusiastic about reading it. It doesn't mean that this book is hard to know but Security Metrics: Replacing Fear, Uncertainty, and Doubt giving you buzz feeling of reading. The author conveys their point in particular way that can be understood by means of anyone who read the item because the author of this reserve is well-known enough. This specific book also makes your own vocabulary increase well. That makes it easy to understand then can go with you, both in printed or e-book style are available. We highly recommend you for having this kind of Security Metrics: Replacing Fear, Uncertainty, and Doubt instantly.
David Mathews:
The e-book with title Security Metrics: Replacing Fear, Uncertainty, and Doubt contains a lot of information that you can study it. You can get a lot of advantage after read this book. That book exist new knowledge the information that exist in this guide represented the condition of the world right now. That is important to yo7u to find out how the improvement of the world. This particular book will bring you inside new era of the internationalization. You can read the e-book in your smart phone, so you can read the idea anywhere you want.
Lowell Bohler:
Are you kind of hectic person, only have 10 as well as 15 minute in your morning to upgrading your mind talent or thinking skill even analytical thinking? Then you have problem with the book than can satisfy your small amount of time to read it because all of this time you only find book that need more time to be learn. Security Metrics: Replacing Fear, Uncertainty, and Doubt can be your answer because it can be read by you who have those short time problems.
Read Security Metrics: Replacing Fear, Uncertainty, and Doubt by Andrew Jaquith for online ebook
Security Metrics: Replacing Fear, Uncertainty, and Doubt by Andrew Jaquith Free PDF d0wnl0ad, audio books, books to read, good books to read, cheap books, good books, online books, books online, book reviews epub, read books online, books to read online, online library, greatbooks to read, PDF best books to read, top books to read Security Metrics: Replacing Fear, Uncertainty, and Doubt by Andrew Jaquith books to read online.
No comments:
Post a Comment