"What’s the benefit of using metrics? Basically, to improve overall security and reduce costs.” @Raymond Musser, CPP
Many questions in every professionals' mind that simply can be answered through this paper, for examples :
- How can I add value to my role and organization? - Parameters for security expenditure, how and why? - Did I make a change or positive impact on my organization since I was hired? do I have proof? - How to market for the security effort within my organization?