Information Security Management Metrics

144 ◾ Information Security Metrics

used by computer systems. SBVR is an integral part of the OMG’s

Model Driven Architecture (MDA).

8

As this work continues, more and better capabilities will continue to be developed

and made available as products and services.

So, we can monitor a process by some means to ensure all steps required by a

procedure are followed. We can provide some type of outcome metrics to ensure

we achieve the desired results. For processes that engender risks if steps are not

followed (such as mixing nitroglycerine to make dynamite or flying jets), either

monitoring at critical stages or creating metrics that warn of impending danger

can be used.

Are there elements of managing security that create hazardous situations ...