Executive IT Security Report

[Dean Halter <dean.halter () NOTES UDAYTON EDU>]

We are being asked to provide our senior management with a meaningful
monthly report to demonstrate how we are doing currently and improvement
over time with respect to IT security.  Have any of you identified a good
set of metrics you use for this purpose?  If any of you have a report that
you use for this purpose that you would be willing to share, it would be
greatly appreciated.

Thanks,
Dean
___________
Dean Halter, CISA, CISSP
IT Risk Management Officer, UDit
University of Dayton

"Security is a process, not a product."  Bruce Schneier