Establishing Relevant Security Metrics, Part 4: How to Establish Security Metrics
by Marcus J. Ranum on December 14, 2015
In this episode of Marcus’ video series on security metrics, he provides advice on starting a metrics program. Should you go bottom up with data, or top down from processes? Find out which approach Marcus advocates and why.
Marcus also talks about SecurityCenter™, the hundreds of statistics it collects, and how to effectively use such a rich metrics repository.
Analyze how your practice works