Leveraging Security Metrics in Your Organization

Introduction

• Why are security metrics important?

1. Why Cybersecurity Practitioners Need Metrics

• Cybersecurity is hard to measure
• Cybersecurity investment
• Define success for a cybersecurity program
• Cybersecurity program maturity

2. Know Your Audience

• The executive mindset
• The business mindset
• The technical leadership mindset

3. Risk Management Objectives

• Defining a risk management objective
• How to use a risk management objective
• Examples of risk management objectives

4. Example Cybersecurity Metrics

• Incidents detected internally vs. externally
• Security NPS
• Fixes implemented within SLA

Conclusion

• Apply security metrics