课程: ISC2 Certified Information Systems Security Professional (CISSP) (2024) Cert Prep

免费学习该课程！

今天就开通帐号，24,600 门业界名师课程任您挑！

Security metrics

Security metrics

课程: ISC2 Certified Information Systems Security Professional (CISSP) (2024) Cert Prep

开始一个月试用 购买团队方案

Security metrics

“

- [Instructor] Organizations evaluate their security programs through the use of metrics that assess the efficiency and effectiveness of critical security controls. These measurements provide insight into the health of a security program, both at a single point in time and on a long-term basis. It's critical that organizations define the metrics and performance measurements that they will use in advance of reporting that data. This ensures the integrity of the process and prevents the cherry picking of favorable results for reporting purposes. Security programs use two primary types of metrics to demonstrate their effectiveness and the state of the organization's security controls. Key performance indicators, or KPIs, are metrics that demonstrate the success of the security program in achieving its objectives. They are mutually agreed upon measures that evaluate whether a security program is meeting its defined goals. Generally speaking, KPIs are a look backwards at historical…

内容