This document discusses measures and metrics for corporate security. It is divided into 4 sections. The first section provides an introduction and overview on the importance of metrics for security from different contexts like risk management, regulation and legal. The second section describes different types of metrics and performance indicators that can be used, including dashboards, risk analyses, vulnerability assessments and leading vs lagging indicators. The third section discusses building a metrics model tailored to each organization's needs by considering factors like business type, important data, objectives and metrics to measure. The last section provides examples of specific security-related measures around areas like risk communication, audits, investigations and operations. It concludes with examples of risk measure maps.

1. Measures and Metrics In Corporate
Security
PLN9, A Complete Security Solution In
Association With Tyco
© COPYRIGHT PLN9 SECURITY SERVICES PVT. LTD. ALL RIGHTS RESERVED

2. 1- Basic

3. 









Introduction
The Business Context for Metrics
The Balanced Scorecard
The Risk Management Context for Metrics
The Regulatory Context for Metrics
The CSO’s Context for Metrics
The Legal Context - The Critical Value of a Policy Infrastructure
Good Metrics are Smart
Keep Your Measures and Metrics in Proper Perspective
Making the Workbook Work for You

4. 2-Types Of Metrics & Performance
Indicators

5. 











Influential Initiatives from the Corner Office
The CSO Dashboard
Risk Analyses
Threat Assessment
Vulnerability Assessment
Cost Risk Benefit Analysis
Leading Indicators
A lagging indicator
Value Indicators
Criticality Ranking
Confidence and Influence Indicators
Security Standards

6. 3-Building A Model Appropriate To Your Needs

7. 









Does the Business we’re in Make a Difference?
What Are the Most Important Data to the Security Executive?
What Should We Measure?
What’s the Goal? What Are Your Objectives With This Data?
Metrics Can Bite
How do I Get the Attention of Different Constituencies?
Management of the Data
What Tools Are in the Presentation Toolkit?
Interpreting the Data
Organizing For Success: Engaging a Security Committee.

8. 4-Security-Related Measures and Metrics

9. 









Communicating Risk Knowledge
Audit Implications
Background Investigations
Business Conduct & Reputational Risk
Criminal Incidents and Investigations
Security Operations, Physical Security & Premises Protection
Contingency Planning & Business Continuity
Business-based Security Programs
Confidence with the Corporate Security Functions
Management, Professional Development & Employee Satisfaction

10. Risk Measure Maps

11. 




Frequency and Severity of Workplace Violence Incidents
Increased Numbers of Employees as Subjects in Misconduct Cases
Security Budget Reduction As Result of Decreasing Corporate Revenues
Business Interruption By Computer Virus
Failure of Security to Respond to Security Breach

12. Thank you