Community

In support of our book, this website is the focal point for a global community of readers, information security practitioners, managers and academics with a professional interest in information security metrics in general, and the PRAGMATIC method in particular.

This section of the website is slowly evolving. Please come back from time to time to see how it’s going. Better yet, get in touch if you would like to contribute content, suggest changes or get actively involved in developing and exploiting the PRAGMATIC approach.

Here’s what we have to offer, so far:

Management-level security awareness papers on security metrics - a series of briefing or discussion papers each outlining several possible metrics relating to a broad range of information security topics.
Getting started with security metrics - a paper laying out step-by-step how to develop a set of information security metrics tailored to the business needs of your organization.
A security metrics group (discussion forum) on Linkedin.
An FAQ on security metrics addressing issues that crop up repeatedly.
The spreadsheet of 150 example metrics from Chapter 7 in the book.
A set of example security metrics graphics demonstrating various creative styles of presentation.