answer
Remember: answer the questions
Most of the different methods of security reporting deal with the specifics of what data points to collect, when to collect them, and where to report the results. Security metrics are simply tools designed to facilitate the decision-making process. They will ultimately help improve performance through the collection, analysis and reporting of information-security-related data points. But, looking at security reporting systems from the customer perspective may lead you in a new, more user-focused direction.
Aug 7 2006 8:27PM
Security
Is reactive patching the answer to protecting against known vulnerabilities?
The time in which it takes hackers to write malicious code to exploit a known vulnerability is rapidly shrinking. The appearance of the Sasser worm in the shortest time ever, just 18 days between the revealing of a Microsoft vulnerability and the beginning of an attack, marks a new low point in the fight against cyber crime. With the protective window of opportunity getting ever smaller, the task of patching vulnerable software is becoming an increasingly endless one.
Jun 29 2004 2:58PM
Security
No adequate answer to email risk: META Group
Jan 1 2000 12:00AM
Security
