Key points are not available for this paper at this time.
Organizations need practical security benchmarking tools in order to plan effective security strategies. This paper explores a number of techniques that can be used to measure security within an organization. It proposes a new benchmarking methodology that produces results that are of strategic importance to both decision makers and technology implementers. The approach taken reflects a work-in-progress that is a combination of practical experience and direct research.
A Sat, study studied this question.