国外安全加固安全加固cis_security_metrics_v1 1 0.pdf

The Center for Internet Security November 1st The CIS Security 2010 Metrics Organizations struggle to make cost-effective security investment decisions; information security professionals lack widely accepted and unambiguous metrics for decision support. CIS established a consensus team of one hundred (150) industry experts to address this need. The result is a set of standard metrics and data definitions that can be used across organizations to collect and analyze data on security process CIS Security performance and