Security metrics is the application of quantitative, statistical, and/or mathematical analyses to measuring security functional trends and workload. In other words, tracking what each function is doing in terms of level of effort (LOE), costs, and productivity. Security metrics management is the managing of an assets protection program and related security functions through the use of metrics. It can be used where managerial tasks must be supported for such purposes as supporting the security professional's position on budget matters, justifying the cost-effectiveness of decisions, determining the impact of downsizing on service and support to customers, etc. Security Metrics Management is designed to provide basic guidance to security professionals so that they can measure the costs of their assets protection program - their security program - as well as its successes and failures. It includes a discussion of how to use the metrics to brief management, justify budget and use trend analyses to develop a more efficient and effective assets protection program.
Over 100 checklists, flowcharts, and other illustrations depict examples of security metrics and how to use them
Drawings, model processes, model procedures and forms enable the reader to immediately put concepts to use in a practical application
Provides clear direction on how to meet new business demands on the Security Professional
Dr. Gerald L. Kovacich has more than 40 years of experience in industrial, business and government security, investigations, information systems security, and information warfare, both in the U.S. Government as a special agent, in international corporations, and subsequently as an international consultant and lecturer. He retired as the Information Warfare Technologist, Northrop Grumman Corporation to pursue a career as an international consultant, lecturer and writer.
Section I: Introduction to the Role of the Security Professionals and Security Metrics ManagementChapter 1: The Security Profession and Its Role in Supporting Business and Government Agency Assets Protection Needs Chapter 2: Management and a Security Metrics FoundationChapter 3: Policies, Procedures, Processes, Plans, and ProjectsChapter 4: Security Metrics Management Program – An OverviewChapter 5: Case Study: Measuring Costs of SecurityChapter 6: Case Study: Six Sigma Section II: Administrative SecurityChapter 7: Information SecurityChapter 8: Personnel SecurityChapter 9: Security Education & Awareness TrainingChapter 10: Security Compliance AuditsChapter 11: Surveys and Risk Management Chapter 12: Corporate Assets Protection ProgramChapter 13: Contingency PlanningSection III: Physical SecurityChapter 14: Guard ForceChapter 15: Technical Security SystemsChapter 16: Locks and KeysChapter 17: Fire ProtectionChapter 18: Executive ProtectionChapter 19: Event Security Section IV: Security OperationsChapter 20: Investigations & Non-Compliance InquiriesChapter 21: Government SecurityChapter 22: Information Systems SecurityChapter 23: Mergers & Acquisitions SecurityChapter 24: OutsourcingSection V: The Security Profession and Metrics Management in the Future Chapter 25: Preparing Now to Support Future Business NeedsChapter 26: Security Metrics Management Technology of the Future and How to Prepare Now to Use It
Edward Halibozek, Gerald L. Kovacich, USA) Halibozek, Edward (Part-time instructor, California State University, Fullerton, CA, USA) Kovacich, Gerald L., CFE, CPP, CISSP (Security consultant, lecturer, and author, Oak Harbor, WA
William C. Boni, Gerald L. Kovacich, Motorola Corporation) Boni, William C. (Director, Information Security, USA) Kovacich, Gerald L., CFE, CPP, CISSP (Security consultant, lecturer, and author, Oak Harbor, WA
Gerald L. Kovacich, Edward Halibozek, USA) Kovacich, Gerald L., CFE, CPP, CISSP (Security consultant, lecturer, and author, Oak Harbor, WA, USA) Halibozek, Edward (Part-time instructor, California State University, Fullerton, CA
Edward Halibozek, Gerald L. Kovacich, USA) Halibozek, Edward (Former Corporate VP of Security for a Fortune 100 company, Los Angeles, CA, USA) Kovacich, Gerald L., CFE, CPP, CISSP (Security consultant, lecturer, and author, Oak Harbor, WA
Gerald L. Kovacich, William C. Boni, USA) Kovacich, Gerald L., CFE, CPP, CISSP (Security consultant, lecturer, and author, Oak Harbor, WA, Information Security for Motorola Corporation. He has worked as the Director of Information Protection Practices for Amgen; as a U.S. Army counterintelligence officer; federal agent and investigator; and a security consultant for such firms as PricewaterhouseCoopers and Ernst & Young) Boni, William C. (Director, Andy Jones
Edward Halibozek, Andy Jones, Gerald L. Kovacich, USA) Halibozek, Edward (Part-time instructor, California State University, Fullerton, CA, Andy (A Research Group Leader at the Security Research Centre for British Telecommunications where he is conducting research into the security of information and communication systems.) Jones, USA) Kovacich, Gerald L., CFE, CPP, CISSP (Security consultant, lecturer, and author, Oak Harbor, WA, Halibozek
Gerald L. Kovacich, Edward Halibozek, USA) Kovacich, Gerald L., CFE, CPP, CISSP (Security consultant, lecturer, and author, Oak Harbor, WA, USA) Halibozek, Edward (Part-time instructor, California State University, Fullerton, CA
Edward Halibozek, Gerald L. Kovacich, USA) Halibozek, Edward (Former Corporate VP of Security for a Fortune 100 company, Los Angeles, CA, USA) Kovacich, Gerald L., CFE, CPP, CISSP (Security consultant, lecturer, and author, Oak Harbor, WA
Gerald L. Kovacich, William C. Boni, USA) Kovacich, Gerald L., CFE, CPP, CISSP (Security consultant, lecturer, and author, Oak Harbor, WA, Information Security for Motorola Corporation. He has worked as the Director of Information Protection Practices for Amgen; as a U.S. Army counterintelligence officer; federal agent and investigator; and a security consultant for such firms as PricewaterhouseCoopers and Ernst & Young) Boni, William C. (Director, Andy Jones
Gerald L. Kovacich, Edward Halibozek, USA) Kovacich, Gerald L., CFE, CPP, CISSP (Security consultant, lecturer, and author, Oak Harbor, WA, USA) Halibozek, Edward (Part-time instructor, California State University, Fullerton, CA
Edward Halibozek, Gerald L. Kovacich, USA) Halibozek, Edward (Part-time instructor, California State University, Fullerton, CA, USA) Kovacich, Gerald L., CFE, CPP, CISSP (Security consultant, lecturer, and author, Oak Harbor, WA
Edward Halibozek, Andy Jones, Gerald L. Kovacich, USA) Halibozek, Edward (Part-time instructor, California State University, Fullerton, CA, Andy (A Research Group Leader at the Security Research Centre for British Telecommunications where he is conducting research into the security of information and communication systems.) Jones, USA) Kovacich, Gerald L., CFE, CPP, CISSP (Security consultant, lecturer, and author, Oak Harbor, WA, Halibozek
William C. Boni, Gerald L. Kovacich, Motorola Corporation) Boni, William C. (Director, Information Security, USA) Kovacich, Gerald L., CFE, CPP, CISSP (Security consultant, lecturer, and author, Oak Harbor, WA