While Use Is Maturing, This Year’s SANS Security Metrics Survey Reveals That Much Still Needs to Be Done to Fully Realize the Potential Power That Metrics Bring to Organizations’ Security Postures.
Metrics for security are in wide use in organizations today, with over 80% of respondents to a new SANS Institute survey claiming some level of maturity on their effective use of security metrics. Yet close to half (47%) feel that a leading impediment for the effective use of security metrics is due to a lack of well-defined requirements for metrics. Results and analysis of the survey, “Improving the Bottom Line with Effective Security Metrics,” will be shared along with actionable advice in a two-part webcast on August 12 and August 19.
Recommended AI News: Mynavi Adopted Cyber Security Cloud’s Service for Automation of AWS WAF Operations “Wafcharm”
“Metrics are – fundamentally – a communications tool, potentially very powerful in evaluating the maturity of an organization’s security culture,” said Barbara Filkins, survey author and Director of Research, SANS Analyst Program. “Regulatory frameworks are a starting point, but organizations need to look beyond a ‘cookie cutter’ approach and evaluate what needs to be measured to identify and mitigate business risk. Survey results were refreshing – supporting the need for mirroring organizational uniqueness – while providing actionable insight into how to meet the challenge of developing useful measures.”
“One of the top factors common across organizations that avoid major damage from cyberattacks is the use of business-relevant security metrics” said John Pescatore, Director of Emerging Security Trends at SANS and survey advisor. “The survey pointed out that, all too often, the most easily collected security metrics satisfy auditors but have little connection to reducing business risk.”
Recommended AI News: UiPath Named A Leader In The 2020 Gartner Magic Quadrant For Robotic Process Automation
While the analytics and data science are certainly important to metrics development, the survey concludes that the emphasis is more on educating and training how to implement a metric framework, taking into account how organizations must differ in achieving their goals and objectives for security.
Recommended AI News: CalAmp Appoints Amal Johnson to Chair CalAmp Board of Directors
Comments are closed, but trackbacks and pingbacks are open.