CDN$ 63.78
  • List Price: CDN$ 86.99
  • You Save: CDN$ 23.21 (27%)
Only 1 left in stock (more on the way).
Ships from and sold by Amazon.ca. Gift-wrap available.
Security Metrics: Replaci... has been added to your Cart
Have one to sell?
Flip to back Flip to front
Listen Playing... Paused   You're listening to a sample of the Audible audio edition.
Learn more
See all 3 images

Security Metrics: Replacing Fear, Uncertainty, and Doubt Paperback – Mar 26 2007

4.0 out of 5 stars 2 customer reviews

See all 5 formats and editions Hide other formats and editions
Amazon Price
New from Used from
Kindle Edition
Paperback
CDN$ 63.78
CDN$ 51.99 CDN$ 10.01

How to Stop Time

click to open popover

What other items do customers buy after viewing this item?

No Kindle device required. Download one of the Free Kindle apps to start reading Kindle books on your smartphone, tablet, and computer.

  • Apple
  • Android
  • Windows Phone
  • Android

To get the free app, enter your mobile phone number.



Product details

  • Paperback: 336 pages
  • Publisher: Addison-Wesley Professional; 1 edition (March 26 2007)
  • Language: English
  • ISBN-10: 0321349989
  • ISBN-13: 978-0321349989
  • Product Dimensions: 17.8 x 2.3 x 22.9 cm
  • Shipping Weight: 476 g
  • Average Customer Review: 4.0 out of 5 stars 2 customer reviews
  • Amazon Bestsellers Rank: #484,603 in Books (See Top 100 in Books)
  • Would you like to tell us about a lower price?
    If you are a seller for this product, would you like to suggest updates through seller support?

  • See Complete Table of Contents

Product description

From the Back Cover

<>The Definitive Guide to Quantifying, Classifying, and Measuring Enterprise IT Security Operations

 

Security Metricsis the first comprehensive best-practice guide to defining, creating, and utilizing security metrics in the enterprise.

 

Using sample charts, graphics, case studies, and war stories, Yankee Group Security Expert Andrew Jaquith demonstrates exactly how to establish effective metrics based on your organization's unique requirements. You'll discover how to quantify hard-to-measure security activities, compile and analyze all relevant data, identify strengths and weaknesses, set cost-effective priorities for improvement, and craft compelling messages for senior management.

 

Security Metricssuccessfully bridges management's quantitative viewpoint with the nuts-and-bolts approach typically taken by security professionals. It brings together expert solutions drawn from Jaquith's extensive consulting work in the software, aerospace, and financial services industries, including new metrics presented nowhere else. You'll learn how to:

 

• Replace nonstop crisis response with a systematic approach to security improvement

• Understand the differences between “good and “bad metrics

• Measure coverage and control, vulnerability management, password quality, patch latency, benchmark scoring, and business-adjusted risk

• Quantify the effectiveness of security acquisition, implementation, and other program activities

• Organize, aggregate, and analyze your data to bring out key insights

• Use visualization to understand and communicate security issues more clearly

• Capture valuable data from firewalls and antivirus logs, third-party auditor reports, and other resources

• Implement balanced scorecards that present compact, holistic views of organizational security effectiveness

 

Whether you're an engineer or consultant responsible for security and reporting to management-or an executive who needs better information for decision-making-Security Metricsis the resource you have been searching for.

 

Andrew Jaquith,program manager for Yankee Group's Security Solutions and Services Decision Service, advises enterprise clients on prioritizing and managing security resources. He also helps security vendors develop product, service, and go-to-market strategies for reaching enterprise customers. He co-founded @stake, Inc., a security consulting pioneer acquired by Symantec Corporation in 2004. His application security and metrics research has been featured inCIO,CSO,InformationWeek,IEEE Security and Privacy, andThe Economist.

 

Foreword         

Preface            

Acknowledgments         

About the Author           

Chapter 1          Introduction: Escaping the Hamster Wheel of Pain          

Chapter 2          Defining Security Metrics           

Chapter 3          Diagnosing Problems and Measuring Technical Security  

Chapter 4          Measuring Program Effectiveness           

Chapter 5          Analysis Techniques     

Chapter 6          Visualization     

Chapter 7          Automating Metrics Calculations

Chapter 8          Designing Security Scorecards  

Index   

 

 

About the Author

Andrew Jaquith is the program manager for Yankee Group’s Enabling Technologies Enterprise group, with expertise in compliance, security, and risk management. Jaquith advises enterprise clients on how to manage security resources in their environments. He also helps security vendors develop strategies for reaching enterprise customers. Jaquith’s research focuses on topics such as security management, risk management, and packaged and custom web-based applications.

 

Jaquith has 15 years of IT experience. Before joining Yankee Group, he cofounded and served as program director at @stake, Inc., a security consulting pioneer, which Symantec Corporation acquired in 2004. Before @stake, Jaquith held project manager and business analyst positions at Cambridge Technology Partners and FedEx Corporation.

 

His application security and metrics research has been featured in CIO, CSO, InformationWeek, IEEE Security and Privacy, and The Economist. In addition, Jaquith contributes to several security-related open-source projects.

 

Jaquith holds a B.A. degree in economics and political science from Yale University.

 

See all Product description

Customer reviews

Share your thoughts with other customers
See all 2 customer reviews

Top customer reviews

July 16, 2008
Format: Paperback
0Comment| 3 people found this helpful. Was this review helpful to you? Report abuse
June 13, 2007
Format: Paperback
0Comment| One person found this helpful. Was this review helpful to you? Report abuse

Most helpful customer reviews on Amazon.com

Amazon.com: 4.0 out of 5 stars 28 reviews
Tony J. Ridley
4.0 out of 5 starsHighly Recommended For Security and Risk Managers-Security Metrics
October 13, 2010 - Published on Amazon.com
Format: Paperback|Verified Purchase
One person found this helpful.
M Fleischeuers
4.0 out of 5 starsRecommended!
June 1, 2015 - Published on Amazon.com
Format: Paperback|Verified Purchase
2 people found this helpful.
Enrique Pastor
4.0 out of 5 starsFour Stars
August 15, 2016 - Published on Amazon.com
Format: Paperback|Verified Purchase
Rick Howard
5.0 out of 5 starsSecurity Professionals Should Have Read This By Now
December 15, 2013 - Published on Amazon.com
Format: Paperback|Verified Purchase
One person found this helpful.
Mike L
5.0 out of 5 starsA must-read for an information security manager
May 25, 2013 - Published on Amazon.com
Format: Paperback|Verified Purchase

Where's My Stuff?

Delivery & Returns

Need Help?