Podcasts Technology CISO Series Podcast Introducing Defense in Depth: Security Metrics

Introducing Defense in Depth: Security Metrics

Published: Jan. 24, 2019, 7:13 p.m.

Our new podcast, Defense in Depth,\xa0is part of the CISO Series network which can be found at\xa0CISOSeries.com.

This is a special episode introducing this new podcast. To get more of Defense in Depth, subscribe to the podcast.

What are the most important metrics to measure when building out your security program? One thing we learned on this episode is those metrics change, as your security program matures.

This episode of\xa0Defense in Depth\xa0is co-hosted by me,\xa0David Spark\xa0(@dspark), the creator of\xa0CISO Seriesand\xa0Allan Alford\xa0(@AllanAlfordinTX), CISO at\xa0Mitel. Our guest is my co-host of the other show,\xa0Mike Johnson, CISO of\xa0Lyft.

Fluency's\xa0correlation and risk scoring technology combined with their approach of using pseudonyms in place of certain PII data greatly facilitates your organization's path towards compliance. Over time, machine learning and artificial intelligence algorithms detect anomalies at an impressive level of scalability. Run Fluency as a standalone or integrate it into your existing SIEM. Learn more by visiting us at booth #4529 at the RSA\xae Conference 2019. On this episode of\xa0Defense in Depth, you'll learn:
  • There is no golden set of security metrics.
  • Metrics you use to measure your security program this year won't necessarily be the same ones you use next year.
  • Use the NIST model to determine your security program maturity.
  • Unlike B2C, B2B companies can use metrics to build a closer tie between security and the business.
  • Regulations and certifications is one easy way to align security with the business.