Offers an approach to developing and implementing relevant security metrics essential for effective security management. This book offers practical guidance for implementing metrics across an entire organization, thereby improving budget and resource allocation, and reducing the possibility that unanticipated events will have catastrophic impacts.