The Cyber Security Handbook – Prepare for, respond to and recover from cyber attacks

CHAPTER 25: STEP 8 – MEASURE AND REVIEW PERFORMANCE

Your cyber security programme will only be useful – and sustainable – if you can show that your cyber security and project objectives are being met. For this, measurement of the logs and outputs of the controls implemented in step 7 (see chapter 24) is essential. These measurements should be designed so that you can compare the information you gain now to measurements you take in the future. (Measurement was briefly covered in 15.1.2.)

For the best results and a consistent approach from the start, you should plan the measurement as you plan the implementation of the control. It could be a good idea to run short tests to prove that the measurement provides reproducible results before putting ...