» The Effectiveness of the Most Underappreciated Controls
Post Summary: Measuring Control Effectiveness is a tricky thing, as effectiveness is relative to external factors. Because we don’t have precise measurements for those factors, Control Effectiveness is (you guessed it) a probability issue. One angle that is usually under-appreciated is the ability of our controls to reduce the probability of action by a threat agent. More research should be done into the ability of controls to reduce the attackers perceived level of effort for success,…
February 12, 2008, 12:43pm Comments
