Security Automation & Measurement

Public-private collaboration is enabling the maturation and adoption of security automation and measurement processes and capabilities. With sponsorship through U.S. Federal agencies, technical leadership of MITRE’s security automation efforts, and collaboration forums with government, industry, and academic stakeholders, the IT security community is:

improving the measurability of security through registries of baseline security data,
providing standardized languages as means for accurately communicating the information,
defining proper usage, and
helping to establish community approaches for standardized processes.

Other activities and initiatives have similar concepts or compatible approaches, and together these efforts are helping to make security more measurable by defining the concepts that need to be measured, providing for high fidelity communications about the measurements, and providing for sharing of the measurements and the definitions of what to measure. Details about these efforts are found at Making Security Measurable.

More Information

Making Security Measurable and Manageable provides a perspective for recasting cybersecurity practices using architecture and systems engineering principles.

Current Collection of All Security Standardization Efforts

Making Security Measurable Events & Participation

Resources for Security Automation & Measurement