Showing 1–2 of 2 articles
Security numbers that tell you whether the work is happening
A meaningful metric has a defined population, a clear calculation, and evidence behind it. Choose measures that help someone decide whether an important control is working.
Read the visual guide
How to handle a security report from someone you do not know
A report from an unfamiliar person may identify a real issue. Provide a controlled route to receive it, assess the evidence, and decide the next step without encouraging unnecessary testing.
Read the visual guide