Skip to main content
U.S. flag

An official website of the United States government

Dot gov

The .gov means it’s official.
Federal government websites often end in .gov or .mil. Before sharing sensitive information, make sure you’re on a federal government site.

Https

The site is secure.
The https:// ensures that you are connecting to the official website and that any information you provide is encrypted and transmitted securely.

Cyber Security Metrics and Measures

Published

Author(s)

Paul E. Black, Karen A. Scarfone, Murugiah P. Souppaya

Abstract

Metrics are tools to facilitate decision making and improve performance and accountability. Measures are quantifiable, observable, and objective data supporting metrics. Operators can use metrics to apply corrective actions and improve performance. Regulatory, financial, and organizational factors drive the requirement to measure IT security performance. Potential security metrics cover a broad range of measurable features, from security audit logs of individual systems to the number of systems within an organization that were tested over the course of a year. Effective security metrics should be used to identify weaknesses, determine trends to better utilize security resources, and judge the success or failure of implemented security solutions.
Citation
Article in Wiley Handbook of Science and Technology for Homeland Security
Publisher Info
John Wiley & Sons, Inc., Hoboken, NJ

Keywords

computer systems, cyber security, homeland security, IT, measures, metrics, software
Created March 2, 2009, Updated February 19, 2017