Cyber and Technology Risk Management Forum, Park City, UT

7+( $57 2) &<%(56(&85,7< 0(75,&6

Vulnerability Management Metrics (From Cisco 2017 Infographic)

‰ 0HWULFV WR FRQVLGHU

ƒ (IIHFWLYHQHVV RI GHWHFWLRQ FRQWUROV ƒ 3DWFK PDQDJHPHQW GDWD ƒ 7HVW UHVXOWV UHODWLQJ WR HIIHFWLYHQHVV RI WRROV DJDLQVW NQRZQ WKUHDWV

0,67UDLQLQJ,QVWLWXWH ,QF ‹,QQRYDWLYH,7//&

6OLGH

,7*=

0,6 7UDLQLQJ ,QVWLWXWH ,QF

3DJH

,7*=

‹ LL7 &RQVXOWLQJ

7+( $57 2) &<%(56(&85,7< 0(75,&6

Example Vulnerability Management Metrics

‰ 4XDUWHUO\ 0HWULFV ƒ

RI V\VWHPV VFDQQHG IRU YXOQHUDELOLWLHV

ƒ RI FULWLFDO V\VWHP YXOQHUDELOLWLHV UHPHGLDWHG LQ GD\V ƒ V\VWHPV UH VFDQQHG IROORZLQJ UHPHGLDWLRQ ƒ 3$66 UDWH IRU TXDUWHUO\ 3&, 6FDQV

0HHWV &ULWHULD Factual

Quantitative Comparative Measured consistently Actionable

0,67UDLQLQJ,QVWLWXWH ,QF ‹,QQRYDWLYH,7//&

6OLGH

,7*=

0,6 7UDLQLQJ ,QVWLWXWH ,QF

3DJH

,7*=

‹ LL7 &RQVXOWLQJ