Skip to main content
U.S. flag

An official website of the United States government

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

IT Security Metrics (ITL Bulletin)



Elizabeth B. Lennon


This ITL Bulletin summarizes the recently published NIST Special Publication (SP) 800-55, Security Metrics Guide for Information Technology Systems, by Marianne Swanson, Nadya Bartol, John Sabato, Joan Hash, and Laurie Graffo. NIST SP 800-55 provides guidance for IT managers and security professionals at all levels, inside and outside of government. The document describes the development and implementation of an IT security metrics program and provides examples of metrics based on the critical elements and security controls and techniques contained in NIST SP 800-26, Security Self-Assessment Guide for Information Technology Systems.
IT Security Metrics (ITL Bulletin)


IT security, metrics, security metrics


Lennon, E. (2003), IT Security Metrics (ITL Bulletin), IT Security Metrics (ITL Bulletin), [online], (Accessed June 12, 2024)


If you have any questions about this publication or are having problems accessing it, please contact

Created August 4, 2003, Updated February 19, 2017