dcsimg

Four Ways Security Analytics Can Improve Business Performance

  • Four Ways Security Analytics Can Improve Business Performance-

    For every risk that surfaces, and for every incident that breaks a threshold, ask yourself this question – is this an improvement opportunity? Look at the area of concern, understand why it is a risk, and work out the storytelling with your business sponsors. Understand the examples from evidence collected, and pool this knowledge for future use. Going up the security maturity curve sometimes seems like the torture of Sisyphus, who was cursed to roll a huge rock uphill only to have it roll back down, daily – but in fact the landscape is constantly changing, and every incremental improvement drives the program to higher levels of agility and value. What cannot be measured cannot be managed or improved. The first step on the journey comes back to metrics, and its wise cousin, analytics.

1 | 2 | 3 | 4 | 5 | 6 | 7

Four Ways Security Analytics Can Improve Business Performance

  • 1 | 2 | 3 | 4 | 5 | 6 | 7
  • Four Ways Security Analytics Can Improve Business Performance-6

    For every risk that surfaces, and for every incident that breaks a threshold, ask yourself this question – is this an improvement opportunity? Look at the area of concern, understand why it is a risk, and work out the storytelling with your business sponsors. Understand the examples from evidence collected, and pool this knowledge for future use. Going up the security maturity curve sometimes seems like the torture of Sisyphus, who was cursed to roll a huge rock uphill only to have it roll back down, daily – but in fact the landscape is constantly changing, and every incremental improvement drives the program to higher levels of agility and value. What cannot be measured cannot be managed or improved. The first step on the journey comes back to metrics, and its wise cousin, analytics.

Security analytics and metrics are as important to the business as any other key performance indicator - such as liquidity, cash flow, or growth in sales or revenue. Today, more boards and leadership teams are demanding that key security analytics and metrics be included in the operational risk portfolio. This puts pressure on security teams to provide analysis and insights that give management the risk intelligence they need to drive better performance.

Security analytics, when properly designed and implemented, can deliver much-needed insights in mapping the size, scale and scope of risks. Analytics can provide a basis for root cause analysis and remediation strategies across policies, processes and, ultimately, investments in technologies. But what’s the best way to do this in a world where the volume, complexity, velocity, variety and veracity of unstructured and structured data makes the task of identifying risks with traditional security monitoring systems cumbersome? We are seeing transformation in the way security programs are tackling the identification and analysis of risk. Yo Delmar, vice president of GRC solutions at MetricStream, has identified four key ways security analytics can be used to improve business performance.