BrandPost: Using Metrics to Improve Your Process

Metrics are mere curiosities unless they tell a story that supports or encourages change or improvement.
When you're looking at producing metrics for your security program, you'll almost always be trying to measure whether you're doing something better or worse. However, to quantify “better” or “worse,” you need to determine what's quantifiable. And in order to figure out what is quantifiable, you need to understand your process.
In fact, one of the most valuable parts o