Comments on: On “Gaming” Security Metrics

By: Stiennon

Stiennon — Sat, 19 Aug 2006 16:50:05 +0000

I am with you on this one Pete. It must be my automotive manufacturing background. You cannot improve without metrics. It is only recently that vendor products have begun to supply metrics that are meant to measure overall posture: numbers that include vulnerabilities, asset value, and threats. The next evolution will be for someone to publish benchmarks by industry vertical and region. Imagine the scramble by the IT department if their score fell below the norm?

By: RiskAnalys.is

RiskAnalys.is — Wed, 16 Aug 2006 14:13:26 +0000

Security Metrics Post

Mike sounds like he is channeling Donn Parkers fatalistic and random finger-crossing approach to security From a great post on Metrics over at Spire Security.

…

By: Security Incite: Analysis on Information Security

Security Incite: Analysis on Information Security — Wed, 16 Aug 2006 12:14:42 +0000

The Daily Incite – August 16, 2006

August 16, 2006 – #96 Good Morning: Boy Im bushed. Those mid-week late nights are challenging, but the Dave Matthews show was great. Hes one of the artists that just jams. 10-15 minute jams that start out like a song you recognize and then