Many security practitioners are reluctant to launch a security metrics program—after all, management will see those performance numbers!

The reality is that Security's performance will always be judged by management. Do you want that to be done by criteria that you establish, or by criteria set by someone who knows less about security and your security operations than you do?

The only way to prove—to yourself or anyone—that something is working as it should be, is to measure it.

Metrics are the empowerment to allow you to measure ROI, Total Cost of Ownership, and improve processes that move your corporate needle.

Example metrics will be presented and discussed in detail. You should finish this session with a high comfort level about what you yourself can accomplish with a security metrics program tailored for your operations.

This session builds on the following workshop preparation materials:

• Worksheet: Security Operations Metrics
• Worksheet: Organizational Business Drivers