NDLI: Measuring security

Content Provider	IEEE Xplore Digital Library
Author	Bilbao, A. Bilbao, E.
Copyright Year	2013
Description	Author affiliation: Cuevavaliente Ing., Tres Cantos, Spain (Bilbao, A.; Bilbao, E.)
Abstract	Measuring Security is a clear need widely spread in the field of Cyber Security. It is part of the standardized risk management, such as ISO 27001, and it is an essential tool in the PDCA cycle of continuous improvement.On the other hand, in Physical Security environment just a few organizations are still using risk management systems oriented on continuous improvement, based on PDCA cycles, such as ISO 31000. This may be the reason why Physical Security does not have extended experience on how to measure its performance. Notwithstanding, Managing Security, Information Technology, Customs Relations, Production, or any other function of a company or organization should be measured. Obviously what it is not measured cannot be evaluated. And if you cannot evaluate a function of a company, how do you know if their leaders are doing well? How do you know if you are providing appropriate resources or not? In this paper we analyze which Security aspects can be measured and how. Several sets of parameters are proposed to be considered, in order to analyze the Security resources of an Organization: Effectiveness (incidents and the success of his rejection); Efficiency (money, people, work hours); Performance (equipment breakdowns attendance times, officers absenteeism, etc.); Evolution of the threats addressed (incidents and attempts); Maturity of the resources (projects planned, implemented, on operation, audited). The existence of a methodology for measuring Security is essential in the implementation of a risk management system focused on continuous improvement. Measuring Security is a key to propose organizational goals and generate benchmarking among different branches or at different moments. Cuevavaliente Ingenieros has specific experience on implementing security metrics for international companies.
Starting Page	1
Ending Page	5
File Size	370872
Page Count	5
File Format	PDF
ISBN	9781479908899
ISSN	21530742
DOI	10.1109/CCST.2013.6922054
Language	English
Publisher	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Publisher Date	2013-10-08
Publisher Place	Colombia
Access Restriction	Subscribed
Rights Holder	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Subject Keyword	Security Measurement ISO standards Companies Standards organizations Maintenance engineering Efficiency Metrics ISO 31000 effectiveness
Content Type	Text
Resource Type	Article

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

Physical and Logical Security management organization model based on ISO 31000 and ISO 27001

Measuring and Monitoring Software Maintenance Services: An Industrial Experience

IT risk management framework based on ISO 31000:2009

A propose technical security metrics model for SCADA systems

Information security, new approach

Evaluation metrics for ontology-based security standards mapping

Alternative Security Metrics

Physical and logical Security Risk Analysis model

EMS and its effectiveness in Indian organizations

Measuring security

Similar Documents

Physical and Logical Security management organization model based on ISO 31000 and ISO 27001

Measuring and Monitoring Software Maintenance Services: An Industrial Experience

IT risk management framework based on ISO 31000:2009

A propose technical security metrics model for SCADA systems

Information security, new approach

Evaluation metrics for ontology-based security standards mapping

Alternative Security Metrics

Physical and logical Security Risk Analysis model

EMS and its effectiveness in Indian organizations

Measuring security