A guide to defining, creating, and utilizing security metrics in the enterprise. Using sample charts, graphics, case studies, and war stories, this book demonstrates how to establish effective metrics based on your organization's unique requirements. It helps discover how to quantify hard-to-measure security activities.