Release Date: Mon May 11 06:38:28 2009
This document contains twenty (20) metric definitions for six (6) important business functions: Incident Management, Vulnerability Management, Patch Management, Application Security, Configuration Management and Financial Metrics. Additional consensus metrics are currently being defined for these and additional business functions.
Acknowledgements
The CIS community thanks the entire consensus team with special recognition to the following individuals who contributed greatly to the creation of this guide: