Computer Security : Security Metrics Guide for Information Technology Systems

This report provides guidance on how an organization, through the use of metrics, identifies the adequacy of in-place security controls, policies, & procedures. It provides an approach to help management decide where to invest in additional security protection resources or identify & evaluate nonproductive controls. The report explains the metric development & implementation process & how it can also be used to adequately justify security control investments. The results of an effective metric program can provide useful data for directing the allocation of information security resources & should simplify the preparation of performance-related reports.Swanson, Marianne is the author of 'Computer Security : Security Metrics Guide for Information Technology Systems', published 2003 under ISBN 9780756738624 and ISBN 0756738628.