Measuring effectiveness is fundamental for driving adoption and progress toward goals. Customer-centricity is a prerequisite for defining effectiveness.
Current State of Measures
Considering that Information Security is, at best, a governance topic in the boardroom and the accountability is assigned to the IT department, the metrics for measuring security effectiveness, if any, are IT-centric and operational in nature in most organizations. Many of these ...