Security Metrics, A Beginners Guide (Paperback)

Security Smarts for the Self-Guided IT Professional

Learn how to communicate the value of an information security program, enable investment planning and decision making, and drive necessary change to improve the security of your organization. Security Metrics: A Beginner's Guide explains, step by step, how to develop and implement a successful security metrics program.

This practical resource covers project management, communication, analytics tools, identifying targets, defining objectives, obtaining stakeholder buy-in, metrics automation, data quality, and resourcing. You'll also get details on cloud-based security metrics and process improvement. Templates, checklists, and examples give you the hands-on help you need to get started right away.

Security Metrics: A Beginner's Guide features:

• Lingo--Common security terms defined so that you're in the know on the job
• IMHO--Frank and relevant opinions based on the author's years of industry experience
• Budget Note--Tips for getting security technologies and processes into your organization's budget
• In Actual Practice--Exceptions to the rules of security explained in real-world contexts
• Your Plan--Customizable checklists you can use on the job now
• Into Action--Tips on how, why, and when to apply new skills and techniques at work

Caroline Wong, CISSP, was formerly the Chief of Staff for the Global Information Security Team at eBay, where she built the security metrics program from the ground up. She has been a featured speaker at RSA, ITWeb Summit, Metricon, the Executive Women's Forum, ISC2, and the Information Security Forum.

《自助式 IT 專業人員的安全智慧》

學習如何傳達資訊安全計畫的價值，促進投資規劃和決策，並推動必要的改變以提升組織的安全性。《安全度量：初學者指南》逐步解釋如何開發和實施成功的安全度量計畫。

這本實用資源涵蓋專案管理、溝通、分析工具、確定目標、定義目標、獲得利益相關者的支持、度量自動化、資料品質和資源配置。您還將獲得有關基於雲端的安全度量和流程改進的詳細資訊。範本、檢查清單和實例將提供您所需的實際幫助，讓您立即開始。

《安全度量：初學者指南》特色：
- Lingo：解釋常見的安全術語，讓您在工作中了解情況
- IMHO：基於作者多年的行業經驗，提供坦率而相關的意見
- Budget Note：獲取安全技術和流程納入組織預算的提示
- In Actual Practice：在真實情境中解釋安全規則的例外情況
- Your Plan：可自訂的檢查清單，可立即在工作中使用
- Into Action：在工作中應用新技能和技巧的方法、原因和時機的提示

Caroline Wong，CISSP，曾是eBay全球資訊安全團隊的首席幕僚，她從頭開始建立了安全度量計畫。她曾在RSA、ITWeb Summit、Metricon、Executive Women's Forum、ISC2和Information Security Forum等場合擔任特邀演講嘉賓。