Free Ebook PRAGMATIC Security Metrics: Applying Metametrics to Information Security, by W. Krag Brotby, Gary Hinson
To get this book PRAGMATIC Security Metrics: Applying Metametrics To Information Security, By W. Krag Brotby, Gary Hinson, you could not be so confused. This is online book PRAGMATIC Security Metrics: Applying Metametrics To Information Security, By W. Krag Brotby, Gary Hinson that can be taken its soft data. It is various with the on the internet book PRAGMATIC Security Metrics: Applying Metametrics To Information Security, By W. Krag Brotby, Gary Hinson where you could get a book then the vendor will certainly send out the published book for you. This is the location where you can get this PRAGMATIC Security Metrics: Applying Metametrics To Information Security, By W. Krag Brotby, Gary Hinson by online as well as after having manage buying, you can download PRAGMATIC Security Metrics: Applying Metametrics To Information Security, By W. Krag Brotby, Gary Hinson on your own.
PRAGMATIC Security Metrics: Applying Metametrics to Information Security, by W. Krag Brotby, Gary Hinson
Free Ebook PRAGMATIC Security Metrics: Applying Metametrics to Information Security, by W. Krag Brotby, Gary Hinson
Exceptional PRAGMATIC Security Metrics: Applying Metametrics To Information Security, By W. Krag Brotby, Gary Hinson publication is always being the most effective pal for spending little time in your office, evening time, bus, and anywhere. It will be a good way to merely look, open, and also check out guide PRAGMATIC Security Metrics: Applying Metametrics To Information Security, By W. Krag Brotby, Gary Hinson while because time. As recognized, experience and also ability don't always featured the much cash to obtain them. Reading this publication with the title PRAGMATIC Security Metrics: Applying Metametrics To Information Security, By W. Krag Brotby, Gary Hinson will allow you know more points.
This letter could not influence you to be smarter, however the book PRAGMATIC Security Metrics: Applying Metametrics To Information Security, By W. Krag Brotby, Gary Hinson that we offer will stimulate you to be smarter. Yeah, at the very least you'll understand greater than others which do not. This is exactly what called as the top quality life improvisation. Why needs to this PRAGMATIC Security Metrics: Applying Metametrics To Information Security, By W. Krag Brotby, Gary Hinson It's because this is your preferred theme to read. If you like this PRAGMATIC Security Metrics: Applying Metametrics To Information Security, By W. Krag Brotby, Gary Hinson theme around, why don't you check out the book PRAGMATIC Security Metrics: Applying Metametrics To Information Security, By W. Krag Brotby, Gary Hinson to improve your discussion?
The here and now book PRAGMATIC Security Metrics: Applying Metametrics To Information Security, By W. Krag Brotby, Gary Hinson our company offer here is not type of usual book. You understand, checking out currently doesn't indicate to handle the printed book PRAGMATIC Security Metrics: Applying Metametrics To Information Security, By W. Krag Brotby, Gary Hinson in your hand. You could obtain the soft documents of PRAGMATIC Security Metrics: Applying Metametrics To Information Security, By W. Krag Brotby, Gary Hinson in your gadget. Well, we imply that guide that we extend is the soft file of guide PRAGMATIC Security Metrics: Applying Metametrics To Information Security, By W. Krag Brotby, Gary Hinson The content and all points are very same. The difference is only the types of the book PRAGMATIC Security Metrics: Applying Metametrics To Information Security, By W. Krag Brotby, Gary Hinson, whereas, this condition will specifically be profitable.
We share you additionally the way to obtain this book PRAGMATIC Security Metrics: Applying Metametrics To Information Security, By W. Krag Brotby, Gary Hinson without going to guide shop. You could remain to see the link that we provide as well as prepared to download and install PRAGMATIC Security Metrics: Applying Metametrics To Information Security, By W. Krag Brotby, Gary Hinson When many people are active to seek fro in guide shop, you are quite simple to download and install the PRAGMATIC Security Metrics: Applying Metametrics To Information Security, By W. Krag Brotby, Gary Hinson here. So, what else you will opt for? Take the inspiration here! It is not only providing the best book PRAGMATIC Security Metrics: Applying Metametrics To Information Security, By W. Krag Brotby, Gary Hinson yet additionally the best book collections. Below we always provide you the most effective and also easiest method.
Other books on information security metrics discuss number theory and statistics in academic terms. Light on mathematics and heavy on utility, PRAGMATIC Security Metrics: Applying Metametrics to Information Security breaks the mold. This is the ultimate how-to-do-it guide for security metrics.
Packed with time-saving tips, the book offers easy-to-follow guidance for those struggling with security metrics. Step by step, it clearly explains how to specify, develop, use, and maintain an information security measurement system (a comprehensive suite of metrics) to help:
- Security professionals systematically improve information security, demonstrate the value they are adding, and gain management support for the things that need to be done
- Management address previously unsolvable problems rationally, making critical decisions such as resource allocation and prioritization of security relative to other business activities
- Stakeholders, both within and outside the organization, be assured that information security is being competently managed
The PRAGMATIC approach lets you home-in on your problem areas and identify the few metrics that will generate real business value. The book:
- Helps you figure out exactly what needs to be measured, how to measure it, and most importantly, why it needs to be measured
- Describes, scores and ranks more than 150 potential security metrics to demonstrate the value of the PRAGMATIC method
- Highlights security metrics that are widely used and recommended, yet turn out to be rather poor in practice
- Describes innovative and flexible measurement approaches such as maturity metrics with continuous scales
- Explains how to minimize both measurement and security risks using complementary metrics for greater assurance in critical areas such as governance and compliance
In addition to its obvious utility in the information security realm, the PRAGMATIC approach, introduced for the first time in this book, has broader application across diverse fields of management including finance, human resources, engineering, and production--in fact any area that suffers a surplus of data but a deficit of useful information.
Visit SecurityMetametrics.com supporting the global community of professionals adopting the innovative techniques laid out in PRAGMATIC Security Metrics. If you, too, are struggling to make much sense of security metrics, or searching for better metrics to manage and improve information security, Security Metametrics is the place for you.
- Sales Rank: #861139 in Books
- Brand: Brand: Auerbach Publications
- Published on: 2013-01-08
- Original language: English
- Number of items: 1
- Dimensions: 9.21" h x 1.13" w x 6.14" l, 1.90 pounds
- Binding: Hardcover
- 512 pages
Features
- Used Book in Good Condition
Review
Like all books on metrics, PRAGMATIC Security Metrics: Applying Metametrics to Information Security makes the statement that "you can't manage what you can't measure". The authors claim that other books on information security metrics discuss number theory and statistics in academic terms. This title promises to be light on mathematics and heavy on utility and is meant as a how-to-do-it guide for security metrics.
As to the title, PRAGMATIC is an acronym for the basis of the method of the book, in using metrics that are predictive, relevant, actionable, genuine, meaningful, timely, independent and cost. After reading the first chapter, PRAGMATIC Security Metrics: Applying Metametrics to Information Security looks like it may live up to its promise of being able to use metrics not only to track and report performance but to identify problem areas and opportunities, and drive information security improvements. If so, this could be the metrics book a lot of information security professionals have been waiting for.
―Ben Rothke, CISSP, CISM, Information Security Manager, Wyndham Worldwide; and author of Computer Security: 20 Things Every Employee Should Know, writing on the RSA Conference Blog, www.rsaconference.com
About the Author
Krag Brotby CISM CGEIT has 30 years' experience in enterprise computer security architecture, governance, risk, and metrics. He is the principal author/editor of ISACA's Certified Information Security Manager Review Manual, plus Information Security Governance: Guidance for Boards of Directors and Guidance for Information Security Managers; Information Security Management Metrics; and Information Security Governance: A Practical Development and Implementation Approach. Krag has served on ISACA committees and the California High Tech Task Force Steering Committee, and frequently presents conference workshops and seminars. Krag was the principal architect for Xerox BASIA enterprise security and the SWIFT Next Gen PKI; served as technical director at RAND Corporation and chief security strategist for TransactPlus. He developed policies for several U.S. banks and consulted for Australia Post, New Zealand Inland Revenue, Singapore Infocom Development Agency, Microsoft, Unisys, AT&T, BP Alyeska, Countrywide Financial, Informix, Visa, VeriSign, Digital Signature Trust, Zantaz, Bank Al-Bilad, J.P. Morgan Chase, KeyBank, Certicom, and Paycom, among others. Krag delivers courses in metrics, governance‐risk‐compliance (GRC) and risk, and holds a foundation patent for digital rights management.
Dr Gary Hinson PhD MBA CISSP has worked in IT system and network administration, information security and IT auditing with multinationals in the pharmaceuticals/life sciences, utilities, IT, engineering, defense, and financial services industries, since the 1980s, and consulting since 2000. His day job involves preparing security awareness materials for NoticeBored (NoticeBored.com), an innovative subscription service. He is also responsible for ISO27001security.com, the ISO27k Toolkit and Forum supporting a global user community. Gary was originally a scientist researching bacterial genetics. The rational scientist and metrician still lurks deep within.
Most helpful customer reviews
7 of 8 people found the following review helpful.
A wealth of tools and inputs for anybody having to deal with metrics.
By Daniel Brunner
In the last few years the term "security metrics" has developed somewhat into a holy grail. Everybody wants them, everybody seems to know that they are necessary, but how the devil is the CISO or the IT department able to get them? As a result we were presented with ISO 27004, some NIST papers and others and the time of writing the term "security metrics" generates over 2.4m hits when googled and "information security metrics" over 990'000.
As a CISO I am need of security metrics myself but was always a little bit hesitant of delving deeper into the matter as some of the books I read about the topic seemed arcane and rather impractical for daily use. And now this book comes along, making the whole matter in my opinion much clearer and easier to handle.
In the first few chapters Brotby and Hinson provide an overview of the status quo and the why and how of security metrics. They deal with great insight with the differing methods and concepts, and the purpose of and audience for security metrics. Chapter 5 deals concisely with points actually to be measured and where one can find them. Throughout the language is very accessible, making this book a pleasure to read and work with.
In chapter 6 the authors then provide us with a thoughtful introduction to their PRAGMATIC approach which is followed by a chapter with over 150 information security metrics. All these metrics are explained in detail, are easy to understand and thus provide a practical tool ready to use for anybody in need of reference points what and how to "measure security".
The next chapter deals concisely with the "how to". The authors provide a clear and concise explanation of how to design an information security measurement system using their method. In just about 20 pages they manage to make clear what has to go into the system, which reference points are to be considered and how everything can be pulled together in order to be able to create a system which can be easily handled and worked with as required.
The final chapters then provide the readers with more information about using metrics in general and the system of Brotby and Hinson in particular. A case study shows the practical application of the PRAGMATIC system and the final pages provide once more a wealth of helpful tools.
In summary I would like to give the following verdict: Until now I have not come across a book about information security metrics that was so clearly and concisely written. The book is easy to understand and provides a wealth of tools and inputs for anybody having to deal with metrics.
The sample metrics and the very thoughtful insights regarding the creation of an information security metrics system tailor-made for the individual organization hopefully will make this book a standard work. It is clear that the authors have thought a lot about the subject and also have practical experience in the matter, as otherwise this tome would have turned out turgid and technological, something which it clearly is not.
3 of 3 people found the following review helpful.
Good guide for to develop an information security metrics program
By Ben Rothke
Like all books on metrics, early in PRAGMATIC Security Metrics: Applying Metametrics to Information Security authors Krag Brotby and Gary Hinson state that “you can't manage what you can't measure”.
The authors claim that other books on information security metrics discuss number theory and statistics in academic terms. This title promises to be light on mathematics and heavy on utility and is meant as a how-to-do-it guide for security metrics.
Based on that claim, the authors likely had a book such as Data-Driven Security: Analysis, Visualization and Dashboards by Jay Jacobs and Bob Rudis in mind. As Jacobs and Rudis do indeed use statistics extensively in their approach to security metrics.
As to the title, PRAGMATIC is an acronym for the basis of the method of the book, in using metrics that are predictive, relevant, actionable, genuine, meaningful, timely, independent and cost.
One of the benefits of the book is that it provides a method to create quantitative methods for risk, and how to estimate which resources to use to mitigate those identified risks
The authors note that as a consequence of the way the field of information security has developed from IT security, current practice in security metrics seems to be driving by the availability of raw data from firewalls and other systems. But when it comes to measuring security, many organizations completely ignore the nontechnical factors that are often of equal importance to managing information security in a manner that supports the firm’s business objectives. And that is precisely the gap the book is attempting to fix.
Chapter 7 makes up the bulk of the book when it details over 150 different useful metrics in which to use.
For those looking for a book in which to develop their information security metrics program, in PRAGMATIC Security Metrics: Applying Metametrics to Information Security is a valuable reference.
4 of 5 people found the following review helpful.
More than metrics
By Koenraad
This books makes you think about metrics. It is applied to information security, but the line of thinking can easily be extended to many other fields of management. Before offering a rated choice of about 150 metrics, the authors explain a complete methodology on choosing and rating candidate metrics. A must read for those that produce KPI's for senior management, or for senior manager that want to be informed by useful indicators.
See all 9 customer reviews...
PRAGMATIC Security Metrics: Applying Metametrics to Information Security, by W. Krag Brotby, Gary Hinson PDF
PRAGMATIC Security Metrics: Applying Metametrics to Information Security, by W. Krag Brotby, Gary Hinson EPub
PRAGMATIC Security Metrics: Applying Metametrics to Information Security, by W. Krag Brotby, Gary Hinson Doc
PRAGMATIC Security Metrics: Applying Metametrics to Information Security, by W. Krag Brotby, Gary Hinson iBooks
PRAGMATIC Security Metrics: Applying Metametrics to Information Security, by W. Krag Brotby, Gary Hinson rtf
PRAGMATIC Security Metrics: Applying Metametrics to Information Security, by W. Krag Brotby, Gary Hinson Mobipocket
PRAGMATIC Security Metrics: Applying Metametrics to Information Security, by W. Krag Brotby, Gary Hinson Kindle
[L509.Ebook] Free Ebook PRAGMATIC Security Metrics: Applying Metametrics to Information Security, by W. Krag Brotby, Gary Hinson Doc
[L509.Ebook] Free Ebook PRAGMATIC Security Metrics: Applying Metametrics to Information Security, by W. Krag Brotby, Gary Hinson Doc
[L509.Ebook] Free Ebook PRAGMATIC Security Metrics: Applying Metametrics to Information Security, by W. Krag Brotby, Gary Hinson Doc
[L509.Ebook] Free Ebook PRAGMATIC Security Metrics: Applying Metametrics to Information Security, by W. Krag Brotby, Gary Hinson Doc
