Outcome Based Cybersecurity Metrics Reference

[JWG_60]

Anyone have any good references on developing cybersecurity metrics? Articles, Books, Seminars or Videos? Also hearing any personal experiences in metric development, implementation and tracking would be helpful. 

Thanks!

[dcontesti]

Recently @TrickyDicky and I put together a blog on Metrics:

https://blog.isc2.org/isc2_blog/2022/06/four-steps-to-using-metrics-to-defend-your-security-budget.h...

Not sure if that will help or not.

d

[oreny]

one of the first places i'll start with beside NIST and CISA is CSA - https://cloudsecurityalliance.org/ it is also part of the CCSP certification and has lots of cloud based knoeldge

Oren