Original Post: Security Champions: Metrics & Data
The content emphasizes the importance of security metrics for two primary reasons: reporting success to higher-ups and improving one’s own programs and methods. It warns against relying on vanity metrics, using an anecdote about blog post “clicks” versus actual readership as an example. For security champion programs, it suggests measuring factors such as the number of new champions, program engagement, bug reports and fixes, unique security issues identified by champions, champions’ job satisfaction, and gathering success stories to report ROI to management. The next article in the series promises additional tips and a conclusion.
Go here to read the Original Post