CISO Stories is a monthly program featuring a series of content powered by the 1,200+ members
of CyberRisk Alliance’s CISO Community. Each month, CISO Stories features a topic selected by
CyberRisk Alliance’s CISO Community and will feature four weeks of content that explores the
topic from a variety of perspectives and in a variety of different formats published here.
Security Metrics Resources
Webcasts
Building an effective cybersecurity metrics program
During this month of CISO Stories, practitioners will share their experiences and challenges with implementing a cybersecurity metrics program.
Security Metrics That Matter: The CISO Perspective
In this panel, CISOs share their challenges and experiences implementing and expanding a metrics program and offer insight into the nebulous task of selecting metrics that tell the story of security at your organization.
Resources
Roadmap to effective security metrics: Guidance from the CyberRisk Collaborative
This document aims to help security teams improve their security metrics programs by leveraging these shared insights.
What is a security metric?
A security metric is defined by the following characteristics…
What makes a security metric useful?
A security metric is only valuable when it meets certain conditions. Here are the key factors that make a security metric useful to…
Checklist for developing security metrics
To assist organizations in developing effective security metrics, consider the following…
CISO STORIES PODCASTVIEW PAST EPISODES
CISOs Advising Cybersecurity Companies, Get on Board! – Bob West – CSP #180
As We Implement Zero Trust, Let’s Not Forget About Metrics – George Finney – CSP #179
CISO and the Board: Demonstrating value and relevant metrics – Max Shier – CSP #178
Security Program Controls/Technologies
Point Vs. Platform: Improving TCO Cost/Benefit – Patrick Benoit – CSP #177
