PRAGMATIC Security Metrics

Applying Metametrics to Information Security

W. Krag Brotby, Gary Hinson

• Publisher: Auerbach Publications
• Year: 2016
• Print ISBN:
  9781439881521
• Edition: 1
• eBook ISBN:
  9781439881538
• Topic: Business
• Subtopic: Management
• Index: Business

Other books on information security metrics discuss number theory and statistics in academic terms. Light on mathematics and heavy on utility, PRAGMATIC Security Metrics: Applying Metametrics to Information Security breaks the mold. This is the ultimate how-to-do-it guide for security metrics.Packed with time-saving tips, the book offers easy-to-fo

Table of contents

• Front Cover
• Contents
• Foreword
• Preface
• Acknowledgments
• Office Memorandum
• Chapter 1 - Introduction
• Chapter 2 - Why Measure Information Security?
• Chapter 3 - The Art and Science of Security Metrics
• Chapter 4 - Audiences for Security Metrics
• Chapter 5 - Finding Candidate Metrics
• Chapter 6 - Metametrics and the PRAGMATIC Approach
• Chapter 7 - 150+ Example Security Metrics
• Chapter 8 - Designing PRAGMATIC Security Measurement System
• Chapter 9 - Advanced Information Security Metrics
• Chapter 10 - Downsides of Metrics
• Chapter 11 - Using PRAGMATIC Metrics in Practice
• Chapter 12 - Case Study
• Chapter 13 - Conclusions
• Appendix A: PRAGMATIC Criteria
• Appendix B: Business Model of Information Security (BMIS)
• Appendix C: Capability Maturity Model (CMM)
• Appendix D: Example Opinion Survey Form
• Appendix E: SABSA Security Attributes Table
• Appendix F: Prototype Metrics Catalog
• Appendix G: Effect of Weighting the PRAGMATIC Criteria
• Appendix H: ISO27k Maturity Scale Metrics
• Appendix I: Sample Management Survey
• Appendix J: Observer Bias
• Appendix K: Observer Calibration
• Appendix L: Bibliography
• Back Cover