Network Security, Firewalls, and VPNs, 3rd Edition

How Can You Measure the Success of Network Security?

An organization measures the security of its network by how well its stated security goals are accomplished and its security standards are maintained. In essence, this becomes the organization’s baseline definition for information systems security. For example, if private information on the network does not leak to outsiders, then your efforts to maintain confidentiality were successful. Or, if employees are able to complete their work on time and on budget, then your efforts to provide system integrity protection were successful.

If violations take place that compromise your assets or prevent the accomplishment of a security goal, however, then network security was less than successful. ...