Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Edge Articles

9/19/2019
07:00 AM
Ericka Chickowski
Ericka Chickowski
Edge Features
Connect Directly
Twitter
RSS
E-Mail
50%
50%

The 20 Worst Metrics in Cybersecurity

Security leaders are increasingly making their case through metrics, as well they should - as long as they're not one of these.

Counting Vulnerabilities

Says Martin Gallo, director of strategic research at SecureAuth: "An example of a commonly used vanity metric is counting the vulnerabilities affecting an application, system, or network, and then using it as a measurement of how secure that system is. While we can all agree that it's important to reduce the amount of vulnerabilities, merely counting issues without considering the potential impact and likelihood of those vulnerabilities being exploited is a recipe for poor risk management.

"Likewise, some corporate assets are more critical than others. Applying the same metrics to the most vital and those of lesser importance can cause confusion and likely won't yield any particular action."

(Image: Aris Suwanmalee via Adobe Stock)

Ericka Chickowski specializes in coverage of information technology and business innovation. She has focused on information security for the better part of a decade and regularly writes about the security industry as a contributor to Dark Reading.  View Full Bio

Previous
14 of 21
Next
Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
RyanSepe
100%
0%
RyanSepe,
User Rank: Ninja
9/23/2019 | 1:16:23 PM
Re: So many bad metrics...
I second this. A juxtaposing list would be helpful considering that this list covers a lot of prevalently used metrics in the industry.
peterhill
100%
0%
peterhill,
User Rank: Apprentice
9/19/2019 | 9:03:32 AM
So many bad metrics...
What's left?  How about a follow up on the 20 best metrics?
The Edge Cartoon Contest: Need a Lift?
Flash Poll