“I don’t know if anyone in risk reads the PDF we send them. I mean, even we don’t understand some of what we’re reporting, so why should they?” “The CFO hates our risk management meetings. They look at these numbers we give them and have no idea if it means we’re better or worse.” “We have […]… Read More
The post Effective Security Metrics: ‘Not Everything that Can Be Counted Counts’ appeared first on The State of Security.
from Effective Security Metrics: ‘Not Everything that Can Be Counted Counts’