RE: Security Metrics

Hello John,

The next publication might be usefull for you:

Best Regards,

Roy Hiralall,
IT Security Specialist


----- Original Message -----
From: "Skander Ben Mansour" <securityfocus@benmansour.net>
To: "'John Blackley'" <jblackley@sysmatrix.net>, 
security-management@securityfocus.com
Subject: RE: Security Metrics
Date: Sat, 23 Apr 2005 02:33:55 +0200

> Hello John,
>
> The NIST SP800-55 publication might be of interest :
>
> "Security Metrics Guide for Information Technology Systems"
> http://csrc.nist.gov/publications/nistpubs/800-55/sp800-55.pdf
>
> Best Regards,
>
> Skander Ben Mansour, CISA CISSP
> ---
> http://www.benmansour.net
>
> -----Original Message-----
> From: John Blackley [mailto:jblackley@sysmatrix.net]
> Sent: Thursday, April 14, 2005 5:24 PM
> To: security-management@securityfocus.com
> Subject: Security Metrics
>
>
>
>
> Folks,
>
> a little guidance here please. I'm looking for work already done on
> building security metrics for an organization. Let's say an organization
> wants to measure its security performance against a baseline (perhaps
> ISO17799?). Do you know of any works that have been published showing
> how it was done or tools that were used in the effort.
>
> Any help will be appreciated.
>
> John A Blackley

-- 
_______________________________________________
NEW! Lycos Dating Search. The only place to search multiple dating sites at 
once.
http://datingsearch.lycos.com

Security metrics.pdf
Description: Binary data