Information Security Management Metrics

46 ◾ Information Security Metrics

feedback mechanism required to dynamically adjust and refine the

organization’s strategy over time. e Balanced Scorecard concept is

built upon the premise that what is measured is what motivates organi-

zational stakeholders to act. Ultimately all of the organization’s activi-

ties, resources, and initiatives should be aligned to the strategy. e

Balanced Scorecard achieves this goal by explicitly defining the cause

and effect relationships between objectives, measures, and initiatives

across each perspective and down through all levels of the organization.

Developing a Balanced Scorecard is the first step in creating a Strategy-

Focused Organization.

20

Creating a Strategy-Focused Organization is based on ...