Let’s face it: metrics are hard. Executive boards are requesting risk-reduction measures in support of overall organizational objectives. Anticipating and accurately identifying what to measure and report at the executive level requires cyber risk-reduction insight into and data availability integration within areas of uncertainty that represent the overall business.
Operational leaders are requesting performance-related measures to gauge performance effectiveness according to a prescribed set of objectives. ...