The Metrics Manifesto Confronting Security with Data

Provides predictive security metrics with R—security, analytics, and programming

Massive data breaches and discussions surrounding improving technology security have been topics of intense interest over the past several years. Security failures by organizations such as Equifax, Uber, the U.S Securities and Exchange Commission, and the Republican National Committee, amongst many others, impacted millions of Americans. There is no disputing the importance of effective cybersecurity technologies and practices, yet measuring security effectiveness within corporations and other entities has proved to be a challenge. The Metrics Manifesto examines security metrics with R, the popular open-source programming language and software development environment for statistical computing.

This timely, fully up-to-date guide focuses on applied measurement that proves or disproves information security effectiveness. Comprehensive, detailed chapters discuss security, predictive analytics, and programming with R. Author Richard Seiersen presents an innovative approach to security metrics, looking to fields such as the sciences and professional sports to improve measurement. A valuable tool for discovering how to improve IT security procedures, this important book:

• Uncovers the truths about an organization’s security programs
• Explains how processing data with R can measure security improvements
• Helps technology security teams identify and rectify security weaknesses
• Offer practical insights from a leading security expert with two decade’s experience in information security, risk management, and product development
• Includes a downloadable applied tutorial new R users

The Metrics Manifesto: Confronting Security with Data is an essential resource for IT security managers, risk managers, statisticians, and other security professionals.

RICHARD SEIERSEN is Chief Risk Officer at Resilience Insurance. He is a technology executive with 20 years of experience in information security and risk management. Seiersen has held CISO roles at Twilio, LendingClub, and GE Healthcare and was Co-Founder of Soluble, which was sold to Lacework in 2021. He’s also an active security startup advisor and consulting faculty member with IANS on cybersecurity risk management.

Foreword

Preface

Chapter 1: Introduction

Chapter 2: BOOM! Time to Event Metrics

Chapter 3: Counting on Uncertainty: Preparing for Burndown, Arrival, Wait Times, and Escape Rates

Chapter 4: Burndown Rates: Shifting Right the Bayesian Way

Chapter 5: Risk Arrival Rates: Shift Left Security Metrics

Chapter 6: Wait-Time Rates: Between Arrival and Departure Is… Waiting

Chapter 7: Escape Rates

Chapter 8: Optimization Basics with Bayesian Linear Regression

Chapter 9: ABC A/B Testing and Security ROI

Chapter 10: Dashboarding with BOOM!

Chapter 11: Simulating Data Like a Pro

Index