SecurityRatty: We Not Only Write, But We Speak, Too (and on Metrics)

This is cache of http://riskmanagementinsight.com/riskanalysis/?p=364. Cache is the snapshot of article that we took when we index feed.
To see original page click here.
We are not affiliated with the authors of this article and not responsible for its content.

We Not Only Write, But We Speak, Too (and on Metrics)

2008-06-10 17:04:34 by Alex in RiskAnalys.is

Bet you didn’t know we are that multi-talented, did you? In addition to the Cisco InfoSec Leadership Forum Webinar on June 19, our own Jack Jones will be speaking at:

The Burton Group Catalyst Conference North America 2008 in San Diego, California on June 23-27.

His talk is called, “Metrics: Measurement, Modeling & Meaning“.

Come see Jack as he does more than just practice his alliteration!

How do you justify security spending? How do you gain credibility with other lines of business? How can you get executive management to do more than just the “bare minimum” of regulatory compliance?

Increasingly, CISO’s are discovering that the use of security metrics and a quantitative approach can help show the value of Information Risk Management.

What isn’t well understood, however, is just how to create meaning from a metrics program. Join Jack Jones, former CISO for a Fortune 100 financial services company as he discusses the challenge of finding the right things to measure, the challenges we face in creating measurement, and the role of metrics and modeling in decision making.