Re: Executive IT Security Report

[Gabriel A DeLeon <gabriel.deleon () NYU EDU>]

What, if any, ticketing system to you use? An okay first step is to produce
a list of tickets opened v. how many were resolved that month. The approach
is full of many holes but it could be used to start some conversations.

On Wed, Feb 4, 2015 at 10:26 AM, Dean Halter <dean.halter () notes udayton edu>
wrote:

> We are being asked to provide our senior management with a meaningful
> monthly report to demonstrate how we are doing currently and improvement
> over time with respect to IT security.  Have any of you identified a good
> set of metrics you use for this purpose?  If any of you have a report that
> you use for this purpose that you would be willing to share, it would be
> greatly appreciated.
>
> Thanks,
> Dean
> ___________
> Dean Halter, CISA, CISSP
> IT Risk Management Officer, UDit
> University of Dayton
>
> "Security is a process, not a product."  Bruce Schneier