ASIS Foundation Security Metrics Evaluation Tool

The ASIS Foundation, of which Martin Gill is a Trustee, have recently published a report based on research that it sponsored that you may find of interest. It is entitled ‘Security Performance Metrics’. The research involved an industry survey on the use of metrics, in-depth interviews with security practitioners and the report includes case studies to guide good practice. The study generated these practical, actionable products:

• The Security Metrics Evaluation Tool (Security MET), which security professionals can self administer to develop, evaluate, and improve security metrics
• A library of metric descriptions, each evaluating according to the Security MET criteria
• Guidelines for effective use of security metrics to inform and persuade senior management with an emphasis on organisational risk and return on investment