Risk
Security Metrics and Risk, How valuable is that dashboard report?
Friday, March 27th, 2009Information security risks are hard to quantify because they involve a lot of “what-if” and “it might happen.” Risks are basically Threats multiplied by Vulnerabilities multiplied by Consequences. Information Security departments use number driven performance dashboards to represent information security risks to a company, or to compliance.
What exactly are these reports saying?
Introducing a little Security [...]