Cyber and Technology Risk Management Forum, Park City, UT

7+( $57 2) &<%(56(&85,7< 0(75,&6

‰ 4XDUWHUO\ 0HWULFV ƒ 3HUFHQWDJH RI GHYLFHV ZLWK DQWL YLUXV VRIWZDUH ƒ 3HUFHQWDJH RI GHYLFHV XQGHU FRQILJXUDWLRQ FRQWURO ƒ 3HUFHQWDJH RI VXFFHVVIXO UHVWRUH WHVWV FRPSOHWHG IRU FULWLFDO V\VWHPV Example Security Metric(s)- Malware/Ransomware

0HHWV &ULWHULD Factual

Quantitative Comparative Measured consistently Actionable

0,67UDLQLQJ,QVWLWXWH ,QF ‹,QQRYDWLYH,7//&

6OLGH

,7*=

0,6 7UDLQLQJ ,QVWLWXWH ,QF

3DJH

,7*=

‹ LL7 &RQVXOWLQJ

7+( $57 2) &<%(56(&85,7< 0(75,&6

System Effectiveness Metric

0,67UDLQLQJ,QVWLWXWH ,QF ‹,QQRYDWLYH,7//&

6OLGH

,7*=

0,6 7UDLQLQJ ,QVWLWXWH ,QF

3DJH

,7*=

‹ LL7 &RQVXOWLQJ