{"product_id":"security-metrics-replacing-fear-uncertainty-and-doubt-paperback","title":"Security Metrics: Replacing Fear, Uncertainty, and Doubt - Paperback","description":"\u003cdiv\u003e\u003cp style=\"text-align: right;\"\u003e\u003ca href=\"https:\/\/reportcopyrightinfringement.com\/\" target=\"_blank\" rel=\"nofollow\"\u003e\u003cb\u003eReport copyright infringement\u003c\/b\u003e\u003c\/a\u003e\u003c\/p\u003e\u003c\/div\u003e\u003cp\u003eby \u003cb\u003eAndrew Jaquith\u003c\/b\u003e (Author)\u003c\/p\u003e\u003cp\u003e\u003cstrong\u003eThe Definitive Guide to Quantifying, Classifying, and Measuring Enterprise IT Security Operations\u003c\/strong\u003e \u003c\/p\u003e\u003cp\u003e\u003cem\u003eSecurity Metrics \u003c\/em\u003eis the first comprehensive best-practice guide to defining, creating, and utilizing security metrics in the enterprise.\u003c\/p\u003e \u003cp\u003eUsing sample charts, graphics, case studies, and war stories, Yankee Group Security Expert Andrew Jaquith demonstrates exactly how to establish effective metrics based on your organization's unique requirements. You'll discover how to quantify hard-to-measure security activities, compile and analyze all relevant data, identify strengths and weaknesses, set cost-effective priorities for improvement, and craft compelling messages for senior management.\u003c\/p\u003e \u003cp\u003e\u003cem\u003eSecurity Metrics \u003c\/em\u003esuccessfully bridges management's quantitative viewpoint with the nuts-and-bolts approach typically taken by security professionals. It brings together expert solutions drawn from Jaquith's extensive consulting work in the software, aerospace, and financial services industries, including new metrics presented nowhere else. You'll learn how to: \u003c\/p\u003e \u003cp\u003e- Replace nonstop crisis response with a systematic approach to security improvement\u003c\/p\u003e \u003cp\u003e- Understand the differences between \"good\" and \"bad\" metrics\u003c\/p\u003e \u003cp\u003e- Measure coverage and control, vulnerability management, password quality, patch latency, benchmark scoring, and business-adjusted risk\u003c\/p\u003e \u003cp\u003e- Quantify the effectiveness of security acquisition, implementation, and other program activities\u003c\/p\u003e \u003cp\u003e- Organize, aggregate, and analyze your data to bring out key insights\u003c\/p\u003e \u003cp\u003e- Use visualization to understand and communicate security issues more clearly\u003c\/p\u003e \u003cp\u003e- Capture valuable data from firewalls and antivirus logs, third-party auditor reports, and other resources\u003c\/p\u003e \u003cp\u003e- Implement balanced scorecards that present compact, holistic views of organizational security effectiveness\u003c\/p\u003e \u003cp\u003eWhether you're an engineer or consultant responsible for security and reporting to management-or an executive who needs better information for decision-making-\u003cem\u003eSecurity Metrics \u003c\/em\u003eis the resource you have been searching for.\u003c\/p\u003e \u003cp\u003e\u003cstrong\u003eAndrew Jaquith, \u003c\/strong\u003eprogram manager for Yankee Group's Security Solutions and Services Decision Service, advises enterprise clients on prioritizing and managing security resources. He also helps security vendors develop product, service, and go-to-market strategies for reaching enterprise customers. He co-founded @stake, Inc., a security consulting pioneer acquired by Symantec Corporation in 2004. His application security and metrics research has been featured in \u003cem\u003eCIO\u003c\/em\u003e, \u003cem\u003eCSO\u003c\/em\u003e, \u003cem\u003eInformationWeek\u003c\/em\u003e, \u003cem\u003eIEEE Security and Privacy\u003c\/em\u003e, and \u003cem\u003eThe Economist\u003c\/em\u003e.\u003c\/p\u003e \u003cp\u003eForeword \u003cbr\u003e\u003c\/p\u003e \u003cp\u003ePreface \u003cbr\u003e\u003c\/p\u003e \u003cp\u003eAcknowledgments \u003cbr\u003e\u003c\/p\u003e \u003cp\u003eAbout the Author \u003cbr\u003e\u003c\/p\u003e \u003cp\u003eChapter 1 Introduction: Escaping the Hamster Wheel of Pain \u003cbr\u003e\u003c\/p\u003e \u003cp\u003eChapter 2 Defining Security Metrics \u003cbr\u003e\u003c\/p\u003e \u003cp\u003eChapter 3 Diagnosing Problems and Measuring Technical Security \u003cbr\u003e\u003c\/p\u003e \u003cp\u003eChapter 4 Measuring Program Effectiveness \u003cbr\u003e\u003c\/p\u003e \u003cp\u003eChapter 5 Analysis Techniques \u003cbr\u003e\u003c\/p\u003e \u003cp\u003eChapter 6 Visualization \u003cbr\u003e\u003c\/p\u003e \u003cp\u003eChapter 7 Automating Metrics Calculations \u003cbr\u003e\u003c\/p\u003e \u003cp\u003eChapter 8 Designing Security Scorecards \u003cbr\u003e\u003c\/p\u003e \u003cp\u003eIndex \u003cbr\u003e\u003c\/p\u003e\u003ch3\u003eBack Jacket\u003c\/h3\u003e\u003cp\u003e\u003cb\u003eThe Definitive Guide to Quantifying, Classifying, and Measuring Enterprise IT Security Operations\u003c\/b\u003e \u003c\/p\u003e\u003cp\u003e\u003c\/p\u003e \u003cp\u003e \u003c\/p\u003e \u003cp\u003e\u003ci\u003eSecurity Metrics \u003c\/i\u003eis the first comprehensive best-practice guide to defining, creating, and utilizing security metrics in the enterprise. \u003c\/p\u003e \u003cp\u003e \u003c\/p\u003e \u003cp\u003eUsing sample charts, graphics, case studies, and war stories, Yankee Group Security Expert Andrew Jaquith demonstrates exactly how to establish effective metrics based on your organization's unique requirements. You'll discover how to quantify hard-to-measure security activities, compile and analyze all relevant data, identify strengths and weaknesses, set cost-effective priorities for improvement, and craft compelling messages for senior management. \u003c\/p\u003e \u003cp\u003e \u003c\/p\u003e \u003cp\u003e\u003ci\u003eSecurity Metrics \u003c\/i\u003esuccessfully bridges management's quantitative viewpoint with the nuts-and-bolts approach typically taken by security professionals. It brings together expert solutions drawn from Jaquith's extensive consulting work in the software, aerospace, and financial services industries, including new metrics presented nowhere else. You'll learn how to: \u003c\/p\u003e \u003cp\u003e \u003c\/p\u003e \u003cp\u003e- Replace nonstop crisis response with a systematic approach to security improvement\u003c\/p\u003e \u003cp\u003e- Understand the differences between \"good\" and \"bad\" metrics\u003c\/p\u003e \u003cp\u003e- Measure coverage and control, vulnerability management, password quality, patch latency, benchmark scoring, and business-adjusted risk\u003c\/p\u003e \u003cp\u003e- Quantify the effectiveness of security acquisition, implementation, and other program activities \u003c\/p\u003e \u003cp\u003e- Organize, aggregate, and analyze your data to bring out key insights\u003c\/p\u003e \u003cp\u003e- Use visualization to understand and communicate security issues more clearly \u003c\/p\u003e \u003cp\u003e- Capture valuable data from firewalls and antivirus logs, third-party auditor reports, and other resources\u003c\/p\u003e \u003cp\u003e- Implement balanced scorecards that present compact, holistic views of organizational security effectiveness\u003c\/p\u003e \u003cp\u003e \u003c\/p\u003e \u003cp\u003eWhether you're an engineer or consultant responsible for security and reporting to management-or an executive who needs better information for decision-making-\u003ci\u003eSecurity Metrics \u003c\/i\u003eis the resource you have been searching for.\u003c\/p\u003e \u003cp\u003e \u003c\/p\u003e \u003cp\u003e\u003cb\u003eAndrew Jaquith, \u003c\/b\u003eprogram manager for Yankee Group's Security Solutions and Services Decision Service, advises enterprise clients on prioritizing and managing security resources. He also helps security vendors develop product, service, and go-to-market strategies for reaching enterprise customers. He co-founded @stake, Inc., a security consulting pioneer acquired by Symantec Corporation in 2004. His application security and metrics research has been featured in \u003ci\u003eCIO\u003c\/i\u003e, \u003ci\u003eCSO\u003c\/i\u003e, \u003ci\u003eInformationWeek\u003c\/i\u003e, \u003ci\u003eIEEE Security and Privacy\u003c\/i\u003e, and \u003ci\u003eThe Economist\u003c\/i\u003e.\u003c\/p\u003e \u003cp\u003e \u003c\/p\u003e \u003cp\u003eForeword \u003cbr\u003e\u003c\/p\u003e \u003cp\u003ePreface \u003cbr\u003e\u003c\/p\u003e \u003cp\u003eAcknowledgments \u003cbr\u003e\u003c\/p\u003e \u003cp\u003eAbout the Author \u003cbr\u003e\u003c\/p\u003e \u003cp\u003eChapter 1 Introduction: Escaping the Hamster Wheel of Pain \u003cbr\u003e\u003c\/p\u003e \u003cp\u003eChapter 2 Defining Security Metrics \u003cbr\u003e\u003c\/p\u003e \u003cp\u003eChapter 3 Diagnosing Problems and Measuring Technical Security \u003cbr\u003e\u003c\/p\u003e \u003cp\u003eChapter 4 Measuring Program Effectiveness \u003cbr\u003e\u003c\/p\u003e \u003cp\u003eChapter 5 Analysis Techniques \u003cbr\u003e\u003c\/p\u003e \u003cp\u003eChapter 6 Visualization\u0026amp;n\u003c\/p\u003e\u003ch3\u003eAuthor Biography\u003c\/h3\u003e\u003cp\u003e\u003c\/p\u003e\u003cp\u003e\u003cstrong\u003eAndrew Jaquith\u003c\/strong\u003e is the program manager for Yankee Group's Enabling Technologies Enterprise group, with expertise in compliance, security, and risk management. Jaquith advises enterprise clients on how to manage security resources in their environments. He also helps security vendors develop strategies for reaching enterprise customers. Jaquith's research focuses on topics such as security management, risk management, and packaged and custom web-based applications.\u003c\/p\u003e \u003cp\u003eJaquith has 15 years of IT experience. Before joining Yankee Group, he cofounded and served as program director at @stake, Inc., a security consulting pioneer, which Symantec Corporation acquired in 2004. Before @stake, Jaquith held project manager and business analyst positions at Cambridge Technology Partners and FedEx Corporation.\u003c\/p\u003e \u003cp\u003eHis application security and metrics research has been featured in CIO, CSO, InformationWeek, IEEE Security and Privacy, and The Economist. In addition, Jaquith contributes to several security-related open-source projects.\u003c\/p\u003e \u003cp\u003eJaquith holds a B.A. degree in economics and political science from Yale University.\u003c\/p\u003e\n            \u003cdiv\u003e\n\u003cstrong\u003eNumber of Pages:\u003c\/strong\u003e 336\u003c\/div\u003e\n            \u003cdiv\u003e\n\u003cstrong\u003eDimensions:\u003c\/strong\u003e 0.63 x 9.12 x 7.04 IN\u003c\/div\u003e\n            \u003cdiv\u003e\n\u003cstrong\u003ePublication Date:\u003c\/strong\u003e March 01, 2007\u003c\/div\u003e\n            ","brand":"Books by splitShops","offers":[{"title":"Default Title","offer_id":43157332164671,"sku":"9780321349989","price":90.7,"currency_code":"USD","in_stock":true}],"thumbnail_url":"\/\/cdn.shopify.com\/s\/files\/1\/0105\/8226\/1823\/files\/PeuZaO57679780321349989.webp?v=1776980235","url":"https:\/\/dhlswag.com\/products\/security-metrics-replacing-fear-uncertainty-and-doubt-paperback","provider":"BBB","version":"1.0","type":"link"}