
101
10Chapter
Information Security
Governance Metrics
We discussed approaches to developing metrics for implementing a security governance
strategy in Chapter 8. In this chapter, we will examine the decisions that will typically
need to be made and the information needed to support them from a strategic perspec-
tive from the viewpoint of managing an effort to develop and implement a strategy and
from an operational standpoint for strategy development. is will provide the basis
for determining what metrics will be needed to provide decision support information.
For the development of metrics, the intended recipients must always be con-
sidered. M ...