By Ron NewmanPicture this: A CISO is speaking before their company’s board of directors and one board member asks a series of difficult questions. “What did we get for the $15 million we spent on cybersecurity last year? How can we measure our return on investment? How do we know our security defenses are actually providing us the security we expect?”For many years, it’s been difficult for CISOs to supply metrics. While many have been able to tell board members how many attacks their security teams and technologies mitigated each year, it’s often  hard to give additional context by explaining exactly how effective their security measures were, and what they did to get them to that stage of effectiveness.To read this article in full, please click her
Read More