IT Security Metrics: A Practical Framework for Measuring Security & Protecting Data (Paperback)

Part I: Introducing Security Metrics; Chapter 1. What is A Security Metric?; Chapter 2. Designing Effective Security Metrics; Chapter 3. Understanding Data; Case Study I: In Search of Enterprise Metrics; Part II: Implementing Security Metrics; Chapter 4. The Security Process Management Framework; Chapter 5. Analyzing Security Metrics Data; Chapter 6. Designing the Security Measurement Project; Case Study II: Normalizing tool data in a security posture assessment; Part III: Exploring Security Measurement Projects; Chapter 7. Measuring Security Operations; Chapter 8. Measuring Compliance and Conformance; Chapter 9. Measuring Security Cost and Value; Chapter 10. Measuring People, Organizations, and Culture; Case Study III: Web Application Vulnerabilities; Part IV: Beyond Security Metrics; Chapter 11. The Security Improvement Program; Chaper 12. Learning Security: Different Context for Security Process Management; Case Study IV: Getting Management Buy-In For a Metrics Program; Index