COVID-19 Response at

Read what we're doing...

Security Metrics


Product Description
Product Details

Table of Contents

Foreword xv Preface xix Acknowledgments xxv About the Author xxviii Chapter 1 Introduction: Escaping the Hamster Wheel of Pain 1 Chapter 2 Defining Security Metrics 9 Chapter 3 Diagnosing Problems and Measuring Technical Security 39 Chapter 4 Measuring Program Effectiveness 89 Chapter 5 Analysis Techniques 133 Chapter 6 Visualization 157 Chapter 7 Automating Metrics Calculations 217 Chapter 8 Designing Security Scorecards 251 Index 301

Promotional Information

Security Metrics is a comprehensive guide to defining and creating security metrics in Internet-connected businesses. The book shows readers current best practices in analyzing security effectiveness as used by author Andrew Jaquith and other practitioners from leading companies. The book bridges the quantitative viewpoint of security analysis demanded by management and the nuts-and-bolts one typically held by security professionals. The book introduces the analytical methods and technique used to create security metrics, complete with numerous sample charts and graphics, and includes case studies from practitioners that demonstrate how to put metrics to work. Real-world examples illustrate how important metrics can be to a company. Security professionals will learn how to develop metrics on their own and have a much better idea of how effective their current security setup is and what they need to implement to increase this effectiveness.

About the Author

Andrew Jaquith is the program manager for Yankee Group's Enabling Technologies Enterprise group, with expertise in compliance, security, and risk management. Jaquith advises enterprise clients on how to manage security resources in their environments. He also helps security vendors develop strategies for reaching enterprise customers. Jaquith's research focuses on topics such as security management, risk management, and packaged and custom web-based applications. Jaquith has 15 years of IT experience. Before joining Yankee Group, he cofounded and served as program director at @stake, Inc., a security consulting pioneer, which Symantec Corporation acquired in 2004. Before @stake, Jaquith held project manager and business analyst positions at Cambridge Technology Partners and FedEx Corporation. His application security and metrics research has been featured in CIO, CSO, InformationWeek, IEEE Security and Privacy, and The Economist. In addition, Jaquith contributes to several security-related open-source projects. Jaquith holds a B.A. degree in economics and political science from Yale University.

Ask a Question About this Product More...
Write your question below:
Look for similar items by category
Home » Books » Computers » Security
Home » Books » Computers » Security » Networking
People also searched for
How Fishpond Works
Fishpond works with suppliers all over the world to bring you a huge selection of products, really great prices, and delivery included on over 25 million products that we sell. We do our best every day to make Fishpond an awesome place for customers to shop and get what they want — all at the best prices online.
Webmasters, Bloggers & Website Owners
You can earn a 8% commission by selling Security Metrics: Replacing Fear, Uncertainty, and Doubt on your website. It's easy to get started - we will give you example code. After you're set-up, your website can earn you money while you work, play or even sleep! You should start right now!
Authors / Publishers
Are you the Author or Publisher of a book? Or the manufacturer of one of the millions of products that we sell. You can improve sales and grow your revenue by submitting additional information on this title. The better the information we have about a product, the more we will sell!
Item ships from and is sold by, Inc.
Back to top