A Modern Approach on Information Security Measurement

Abstract

What can’t be measured couldn’t be management. The old wisdom of management gain more importance in information security management. The key problem in most organizations is that no one is able to give a statement whether the whole security management system works over all management levels top down or not. Mostly security managers raise information about technical goals and other controls applied in an ISO 27001 ISMS. Less than 10% we think can proof the success down to the last level. The approach mentioned in this text shown a model enabling all managers to measure the success of security through the whole organization.