Information Security Management Metrics

xiii

Introduction

e failures of information security during the past decade are nothing short of

spectacular. e inability of organizations to prevent increasingly dramatic com-

promises has led to huge financial losses, produced a great deal of embarrassment,

and put every sector of the global economy at risk. Despite increasingly draconian

legal, commercial, and regulatory activity, the losses continue to mount, national

interests are still at risk, and “information crimes” proliferate unabated.

Few will argue that it isn’t a problem and, despite greatly increased security

efforts, a growing one. e true cost from all security failures global