The right data–used in the right way–can be crucial to making effective business decisions. Gathering the wrong metrics, or gathering too much data with no intelligent way to separate important or actionable information from trivial data can be devastating. Metrics […]
Security Metrics and the Sinking of the Titanic Read More »
If you’ve ever looked at a job description for a company trying to hire a CISO you’d think only superheroes need apply. Organizations have lofty–often unreasonable–expectations for the CISO role. The task is not impossible but it’s crucial for the
Setting clear expectations for the CISO role Read More »
Security metrics and log data don’t have much value in and of themselves. The value is derived by the questions you ask and information that you can extract from the security metrics and log data. If you have the wrong
Use the right security metrics for the right reasons Read More »
Security is necessary–nobody will really argue that. Effective security, on the other hand, goes beyond filling a requirement with the least effort (or investment) possible. Effective security enhances and facilitates business processes and helps the organization meet goals and drive
Build a solid business case for security Read More »
One of the issues that has plagued security since the dawn of the information age is that it gets no respect. Businesses recognize that security is necessary, but for many it’s considered a necessary evil, and it’s perceived as a
nCircle Benchmark: Security metrics supporting business initiatives Read More »
