Data points that can be reported on are easy to find. How many people clicked on the phishing test? How many emails were blocked by the spam filter? The challenge arises when you want to move beyond security theatre and towards data that actually tells you something meaningful about your security posture.
This presentation will highlight some examples of poor metrics and, hopefully, some more useful ones – providing some food for thought!
Randi has worked in security for more than twenty years, the last thirteen as an information security advisor. She has extensive experience in establishing, auditing and operationalising information security and privacy management systems across a range of organisations.
Randi is passionate about creating engagement and interest in information security and ensuring that security efforts are aligned with the organisation’s business objectives. To achieve this, security initiatives must deliver real value – not simply create additional work.
