Completed
Server grades: simplifying data Vulnerability measures are typically too abstract - Computed by taking a "risk score" per vulnerability Total cumulative score for an organization does not
Class Central Classrooms beta
YouTube videos curated by Class Central.
Classroom Contents
Nobody Understands Me Better - Executive Metrics
Automatically move to the next video in the Classroom when playback concludes
- 1 Intro
- 2 What is this about? Avoiding meaningless metrics Finding better metrics • Improving communication; driving action
- 3 Looking for this? (wrong track)
- 4 Don't show raw NUMB-ers!
- 5 Losing the Executive Support NUMB-ers are what we like Large amounts of data which we know Represent transactions or events
- 6 Executives Seek Quick Value
- 7 Show Business Impact: email
- 8 Build Strong Images
- 9 Email: Typical Presentation
- 10 Email: Better Story
- 11 Email: Improved Story
- 12 Explaining Vulnerabilities... Security Team see the servers as an unpatched mess. Server Admins see patching as a time waster... • Management tries to balance risk vs. effort..
- 13 Show (drive) Patching Success Two activities which are hard to value: - Patching Configuration (when not for performance)
- 14 Server grades: simplifying data Vulnerability measures are typically too abstract - Computed by taking a "risk score" per vulnerability Total cumulative score for an organization does not
- 15 Server Grading Approach
- 16 Server Grades: showing data
- 17 Other Metric Stories There are many stories to tell - Ask what needs to change or improve
- 18 Story: AntiVirus Failed to Clean Red is "bad" and costly. It shows AV failed and the machine required a manual reimage. • The downward trend got attention and fixed in October!
