Gartner-网络安全业务价值基准（英）-2022.9.pdf

The Gartner Cybersecurity Business Value Benchmark, First Generation Published 5 September 2022 - ID - 26 min read By Analyst(s): Paul Proctor, Srinath Sampath, Paul Furtado, Patrick Long, Lisa Neubauer, Deepti Gopal Initiatives: IT Cost Optimization, Finance, Risk and Value CIOs must drive cy bersecurity investment through a business lens. These metric definitions are outcome-driven metrics used to create a peer comparison benchmark of cy bersecurity business value across 16 value levers. Analysis When to Use CIOs seeking to manage cy bersecurity investment must use outcome-driven metrics. Gartner has defined 16 protection-level outcomes that create a foundation for effective collaboration with boards of directors, CISOs and CFOs. These metrics serve as value levers to manage business-led cy bersecurity investments. The goal is to achieve a desired level of cy bersecurity readiness that aligns with the organization’s willingness to pay for it (see Use Value and Cost to Treat Cy bersecurity as a Business Decision). The metrics establish a baseline for peer comparison that is very useful for guiding cy bersecurity investments and board oversight. Organizations should gather their operational execution data and establish a desired target goal of achievement for each metric. On 1 November 2022, Gartner will release a tool for collecting this benchmark data from our clients and other participants. This data will be used in aggregate to create custom benchmarks for organizations by industry, size and region. Use this time between now and 1 November 2022 to gather these metrics for your organization. Gartner, Inc. | Page 1 of 26 Directions for Use ■ Use this guidance and metric definitions to facilitate gathering of the defined metrics. ■ Instrument your systems and processes