Cyber and Technology Risk Management Forum, Park City, UT

7+( $57 2) &<%(56(&85,7< 0(75,&6

‰ :KHUH KDV \RXU RUJDQL]DWLRQ EHHQ" ‰ :KHUH LV LW JRLQJ" ‰ ,V DQ\WKLQJ JRLQJ ZURQJ RU DERXW WR JR ZURQJ" ‰ :KHQ LV WKH RUJDQL]DWLRQ DW D VWDWH ZKHUH WKH\ DUH GRLQJ HQRXJK" Why Do We Need Metrics?

0,67UDLQLQJ,QVWLWXWH ,QF ‹,QQRYDWLYH,7//&

6OLGH

,7*=

0,6 7UDLQLQJ ,QVWLWXWH ,QF

3DJH

,7*=

‹ LL7 &RQVXOWLQJ

7+( $57 2) &<%(56(&85,7< 0(75,&6

‰ &RPPXQLFDWLRQ ‰ 0HWKRG WR WXUQ ³GDWD´ LQWR LQIRUPDWLRQ ‰ ,PSURYHPHQWV ƒ 'ULYH VWUDWHJ\ DQG GLUHFWLRQ ƒ 'ULYH SHUIRUPDQFH ƒ 3URYLGH IRFXV ƒ +HOS PDNH GHFLVLRQV ƒ 3URGXFH ³SXEOLF´ UHODWLRQV Metrics - Purposes

0,67UDLQLQJ,QVWLWXWH ,QF ‹,QQRYDWLYH,7//&

6OLGH

,7*=

0,6 7UDLQLQJ ,QVWLWXWH ,QF

3DJH

,7*=

‹ LL7 &RQVXOWLQJ