Contextualising and Aligning Security Metrics and Business Objectives: a GQM-based Methodology

Eleni Philippou, Sylvain Frey, Awais Rashid

Pre-defined security metrics suffer from the problem of contextualisation, i.e. a lack of adaptability to particular organisational contexts - domain, technical infrastructure, sta…