Author(s)
Elizabeth B. Lennon
Abstract
This ITL Bulletin summarizes the recently published NIST Special Publication (SP) 800-55, Security Metrics Guide for Information Technology Systems, by Marianne Swanson, Nadya Bartol, John Sabato, Joan Hash, and Laurie Graffo. NIST SP 800-55 provides guidance for IT managers and security professionals at all levels, inside and outside of government. The document describes the development and implementation of an IT security metrics program and provides examples of metrics based on the critical elements and security controls and techniques contained in NIST SP 800-26, Security Self-Assessment Guide for Information Technology Systems.
Citation
IT Security Metrics (ITL Bulletin)
Keywords
IT security, metrics, security metrics
Citation
Lennon, E.
(2003),
IT Security Metrics (ITL Bulletin), IT Security Metrics (ITL Bulletin), [online], https://tsapps.nist.gov/publication/get_pdf.cfm?pub_id=150707 (Accessed April 27, 2026)
Additional citation formats
Issues
If you have any questions about this publication or are having problems accessing it, please contact [email protected].