A Framework for Measuring InfoSec as a Business Function

In my December column, I ended with the observation that many CISOs struggle when it comes to first determining and then actually communicating the business value of the security options out there.