'Lack of consistent metrics a security concern'

LONDON, UK: The European computer security agency has stated that a lack of coherent resilience metrics is hampering public- and private-sector organisations' efforts to improve information security. 

A number of systems have been developed to measure the resilience of networks, but metrics refer to different measures and are not harmonised, the European Network and Information Security Agency (Enisa) said on Monday.

This creates confusion about the overall effects of incidents that test network resilience, the agency said.

To read full article click:

http://www.zdnet.co.uk/news/security-management/2011/03/28/lack-of-metrics-hobbles-security-says-enisa-40092292/