Building Business Unit Scorecards

Contributed by Dennis Opacki

Security managers are increasingly turning to security metric scorecards, hoping to produce buttoned-up business cases for spending, and drive accountability outwards to business units. Though recent articles on security metrics have approached scorecards as data visualization exercises 1, one problem remains; measuring an immature organization’s performance is difficult. Producing effective security metric scorecards takes great diligence in metrics definition, data gathering, reporting and communication.

This document is in PDF format. To view it click here.

Rate this article: 
No votes yet