Infosec Metrics: Measuring and Presenting Security Effectiveness to Leadership

Explore effective infosec metrics and their presentation to leadership in this 35-minute LASCON conference talk. Learn how to measure security capabilities, team performance, and program health at scale. Discover Twilio's approach to creating automated, near-real-time metrics that highlight risks, security gaps, and engineering achievements across business units. Gain insights into motivations, challenges, and practical implementation strategies. Access open-sourced templates and code for generating metrics automatically. Cover topics including the importance of metrics, context, the Office of the CISO, missing features, automation requirements, and future developments.