In collaboration with the ASIS Defense and Intelligence Council, the ASIS Foundation sponsored this major research project to empower security professionals to better assess and present metrics.
This report provides the project's findings, including its three practical, actionable products:
The Security Metrics Evaluation Tool (Security MET), which security professionals can self-administer to develop, evaluate, and improve security metrics
A library of metric descriptions, each evaluated according to the Security MET criteria
Guidelines for effective use of security metrics to inform and persuade senior management, with an emphasis on organizational risk and return on investment