3

Diagnosing Problems and Measuring Technical Security

McKinsey has developed a strong, fact-based culture . . . many alumni are surprised at the lack of concrete data analysis in their new organizations.

Ethan Raisel and Paul Friga, The McKinsey Mind

The discipline of measurement underpins many of society’s most revered professions. Young physicists, chemists, and engineers are indoctrinated into science at an early age through the “scientific method”—a controlled and well-defined process for exploring and proving theories about the natural world. When the scientist is investigating a phenomenon, the method requires the scientist to:

  • Formulate a hypothesis about the phenomenon
  • Design tests to support or disprove the hypothesis
  • Rigorously ...

Get Security Metrics: Replacing Fear, Uncertainty, and Doubt now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.