Security Effectiveness Framework Study

Security Effectiveness Framework study
The following graphs report each one of the six effectiveness
metrics in greater detail according to the six input
variables.
Figure 12 reports uptime. A comparison of best and
worst case scenarios suggest uptime is influenced by
security environment and governance variables and less
by enabling technologies, controls and culture.
Figure 13 reports compliance. Similar to Figure 12,
security environment and governance have a more significant
impact on compliance than enabling technologies or
organisational culture.
Figure 14 reports threat containment. Unlike the previous
graphs, enabling technologies influence threat containment.
Here, culture, governance and budget have only a
nominal impact.
Figure 15 reports cost efficiency. As shown, governance
has the most significant influence and enabling technology,
controls and culture have a nominal effect on cost
efficiency.
Figure 16 reports breach prevention. Similar to threat containment,
this metric is significantly influenced by enabling
technologies and controls, and less influenced by budget,
governance and culture.
Figure 17 reports policy enforcement. Clearly, governance
and the security environment have the greatest impact on
this effectiveness metric.
Figure 12: Uptime
Figure 15: Cost efficiency
6.00
4.00
2.00
6.00
0.00
4.00
-2.00 6.00
2.00
-4.00
0.00
-6.00 2.00
-2.00
0.00
-4.00
-2.00
-6.00
-4.00
-6.00
5.00
10.00
-5.00
10.00
-10.00
5.00
-5.00
0.00
-10.00
-5.00
Culture
Security
environment
Enabling
technologies
Controls Governance Budget
Worst case Illustration Best case
Security Enabling Controls Governance Budget
environment technologies
Security
Worst case
Enabling
Illustration
Controls Governance
Best case
Budget
environment technologies
Worst case Illustration Best case
Figure 10.00 13: Compliance
-10.00
10.00
8.00
6.00
4.00
10.00
2.00
8.00
0.00
10.00 6.00
-2.00
4.00
-4.00
8.00
2.00
-6.00
6.00
0.00
-8.00
4.00
-2.00
-10.00
-4.00 0.00
-6.00 -2.00
-8.00 -4.00
-10.00 -6.00
-8.00
-10.00
Culture
Culture
Culture
Culture
Culture
Culture
Culture
Culture
Security
environment
Figure 14: Threat containment
Enabling
technologies
Controls Governance Budget
Security Worst case Enabling Illustration Controls Best Governance case Budget
environment technologies
Security Enabling Controls Governance Budget
environment Worst case technologies Illustration Best case
Worst case Illustration Best case
Security
environment
Enabling
technologies
Controls Governance Budget
Security Worst case Enabling Illustration Controls Best Governance case Budget
environment technologies
Security Enabling Controls Governance Budget
environment Worst case technologies Illustration Best case
Worst case Illustration Best case
6.00
4.00
2.00
6.00
0.00
4.00
-2.00
2.00
-4.00
0.00
-6.00
-2.00
-4.00
-6.00
2.00
6.00
0.00
4.00
-2.00 6.00
2.00
-4.00
4.00
0.00
-2.00
Culture
Security
environment
6.00
Figure 16: Breach prevention
4.00
-4.00 0.00
-2.00
-4.00
-6.00
8.00
6.00
4.00
2.00 8.00
0.00 6.00
-2.00 4.00
-4.00 2.00 6.00
-6.00 0.00 4.00
-8.00 -2.00
-4.00 0.00
-6.00
-2.00
-8.00
-4.00
Culture
Culture
Culture
Culture
Culture
Culture
Security
environment
Figure 17: Policy enforcement
Culture
Security
environment
Enabling
technologies
Enabling
technologies
Enabling
technologies
Controls Governance Budget
Worst case Illustration Best case
Security Enabling Controls Governance Budget
environment technologies
Worst case Illustration Best case
Controls Governance Budget
Worst case Illustration Best case
Security Enabling Controls Governance Budget
environment technologies
Worst case Illustration Best case
Security Enabling Controls Governance Budget
environment technologies
Worst case Illustration Best case
Controls Governance Budget
Worst case Illustration Best case
Security Enabling Controls Governance Budget
environment technologies
Security Enabling Controls Governance Budget
environment Worst case technologies Illustration Best case
Worst case Illustration Best case
18
Sponsored by: HP Information Security and Check Point Software -2.00Technologies Ltd.
-4.00
Ponemon Institute © Research Report & Instrument
8.00
6.00
4.00
2.00
0.00
-6.00
-8.00
Culture Security Enabling Controls Governance Budget