Defines more than 900 metrics measuring compliance with legislation, resiliency of security controls, and return on investment. This book explains what needs to be measured, why and how to measure it, and how to tie security and privacy metrics to business goals and objectives.