
165
Appendix A: Metrics
Classifications
1
A.1 IA Program Developmental Metrics
Organizational IA programs are a comprehensive set of program areas that together
guide an organization’s ability to provide information assurance. IA program devel-
opmental metrics measure the extent to which IA is effective in an organization by
measuring if the organization has chosen the policies and process. ese metrics
can be further classified as policy management or process maturity.
A.1.1 Policy Management Metrics
ese are measures that management uses as security objectives for an organizational
IA program. ese metrics are specific to development of security ...