Provides an approach to managing people, process, and technology through the sound application of metrics. This book demonstrates how to develop a strategy for meeting security challenges and enhancing the business in addressing threats and compliance.