Security programs today focus heavily on qualitative best practices and compliance reviews that may not be efficient or effective to determine the needs of the security program.
Goals and Objectives
Develop a program that incorporates quantitative measures and metrics for cost- benefit analyses and risk estimation.
Use Case Summary
Manage the efficiency and effectiveness of the security program to reduce the most risk with the available resources.