“If you don’t measure it, you can’t manage it,” said George, the chief strategy officer, to a nodding CEO Tom.
Cybersecurity performance can be managed, but only if measured.
The ability to measure performance has always been at the heart of effective management, underlying decisions about how to allocate resources, which practices to employ and whom to reward. Much more so than in the past, this is an age of granular and systematic performance management. Senior executives are exploiting massive amounts of data to understand which products generate profits, which salespeople sell effectively, and which operational teams execute with the highest degree of efficiency.
