Measuring and Communicating Security's Value

Book excerpt: In corporate security today, while the topic of information technology (IT) security metrics has been extensively covered, there are too few knowledgeable contributions to the significantly larger field of global enterprise protection. Measuring and Communicating Security's Value addresses this dearth of information by offering a collection of lessons learned and proven approaches to enterprise security management. Authored by George Campbell, emeritus faculty of the Security Executive Council and former chief security officer of Fidelity Investments, this book can be used in conjunction with Measures and Metrics in Corporate Security, the foundational text for security metrics. This book builds on that foundation and covers the why, what, and how of a security metrics program, risk reporting, insider risk, building influence, business alignment, and much more. - Emphasizes the importance of measuring and delivering actionable results - Includes real world, practical examples that may be considered, applied, and tested across the full scope of the enterprise security mission - Organized to build on a principal theme of having metrics that demonstrate the security department's value to the corporation