Performance Metrics In Cyber Security

Performance metrics are standard, quantifiable measures that are reported to assess performance in a particular area. In an information security environment, it is crucial to collect and analyze metrics to ensure the continuity of growth for an organization's security capabilities.

There are a variety of benefits to the implementation of performance metrics. First, having quantifiable metrics provides the ability to view the impact of security processes and technologies over an extended period of time. In turn, this presents the opportunity to effectively communicate the state of information security to senior management. This communication can provide a more structured guidance when determining how to allocate an organization's resources and improve technologies and processes to achieve a security team's mission.