Risk Management Metrics and Measuring Risk

MUST READ Establishing a Metrics Management System BOOK CHAPTER - This chapter is designed to provide basic guidance necessary for the development of a metrics methodology to understand what, why, when and how infosec can be measured. Three techniques for measuring information systems risk TIP - Improve your ability to measure information systems risk with these three techniques. Security: Measuring Up TIP - Metrics are the key to measuring security. Learn how to gather data and calculate the answers you need.

EXPERT TECHNICAL ADVICE: 1 - 3 of 23

RISK MANAGEMENT METRICS AND MEASURING RISK EXPERTS
			Mike Rothman President and Principal Analyst ASK A QUESTION

	Failure mode and effects analysis: Process and system risk assessment 26 Mar 2008 TIP - Gideon T. Rasmussen explains how the failure mode and effects analysis (FMEA) methodology can quantify the significance of exposures to management.

	Why you shouldn't wager the house on risk management models 05 Dec 2007 TIP - As Mike Rothman explains, risk management metrics are helpful at budget time, but be wary of putting all your eggs in the risk prevention basket.

	Misconceptions about information security outsourcing 02 Oct 2007 TIP - In this tip, Kark outlines the areas where most CISOs need assistance, and unveils common security outsourcing misconceptions and mistakes to avoid.

	VIEW ALL EXPERT TECHNICAL ADVICE ON RISK MANAGEMENT METRICS AND MEASURING RISK

NEWS: 1 - 3 of 31

	Consensus Controls project aims to set benchmarks for compliance SearchSecurity.com | 03 Oct 2008 ARTICLE - The Consensus Controls project aims to provide organizations with a peer review system for IT controls.

	CIS takes the measure of information security SearchSecurity.com | 09 Sep 2008 ARTICLE - The Center for Internet Security has released eight security metrics companies can use to measure their security programs and it plans to expand its list over the next year.

	Security of customer data, IP sustains security budgets SearchSecurity.com | 05 Sep 2008 ARTICLE - Protecting customer data, corporate intellectual property and other sensitive internal data, remains a priority in many corporate board rooms, a Forrester Research survey finds.

	VIEW ALL NEWS ON RISK MANAGEMENT METRICS AND MEASURING RISK

REFERENCE & LEARNING: 1 - 3 of 6

	Quiz: Developing a risk-based compliance program SearchSecurity.com | 28 Jan 2008 QUIZ - A five-question multiple-choice quiz to test your understanding of the content presented by expert Richard Mackey in this lesson of SearchSecurity.com's Compliance School.

	Security Metrics: Replacing Fear, Uncertainty, and Doubt SearchSecurity.com and Addison-Wesley | 10 Jul 2007 BOOK CHAPTER - In this chapter excerpt from "Security Metrics: Replacing Fear, Uncertainty and Doubt," author Andrew Jaquith reveals ways to present security data in a clean and elegant manner.

	Multi-dimensional enterprise-wide security: Risk assessment and analysis methodologies Realtimepublishers.com | 10 Jan 2006 10 TIPS IN 10 MINUTES - Learn how to protect information assets and resources within all areas of the enterprise and in compliance with all regulatory, policy and contractual requirements.

	VIEW ALL REFERENCE & LEARNING ON RISK MANAGEMENT METRICS AND MEASURING RISK

MAGAZINE CONTENT (free subscription required): 1 - 3 of 6

	Interview: Financial Services CISO David Pollino Information Security Magazine | 01 Jun 2008 COLUMNS - CISO Uses Predictive Analystics to Bolster Risk Management Program

	Researcher Puts Quantitative Measurement on Information Security Threats Information Security Magazine | 01 Mar 2008 COLUMNS - Editor's Desk: Score One for Threats

	Risk Management Information Security Magazine | 01 Oct 2006 HOT PICK & PRODUCT REVIEWS - ClearPoint Metrics' Metrics Accelerator 1.1

	VIEW ALL MAGAZINE CONTENT ON RISK MANAGEMENT METRICS AND MEASURING RISK

WEBCASTS: 1 - 2 of 2

	7 Proven Ways to Measure Security - Vendor Webcast VIEW WEBCAST PREMIERED:   25 OCT 2005, 14:00 EDT (18:00, GMT) SUMMARY:   Is your department viewed as a cost center? Attend this webcast and learn how to demonstrate your value by quantifying the importance of reduced downtime for your business.

	CISSP Essentials: Mastering the Common Body of Knowledge -- Class 1, Security management practices - Expert Webcast VIEW WEBCAST PREMIERED:   14 OCT 2004, 09:00 EDT (13:00, GMT) SUMMARY:   While viruses, worms and hacking grab all the news headlines, sound security management practices are the foundation of any organization's security success.

	VIEW ALL WEBCASTS ON RISK MANAGEMENT METRICS AND MEASURING RISK

	SEE ALSO - Topics Related to Risk Management Metrics and Measuring Risk:  Risk Assessment and Analysis