Metrics SIG
Mission
The Metrics SIG helps organizations improve cybersecurity operations through performance measurement. We develop methodologies, metrics, guidance, and resources that support informed decision making and continual improvement.
The SIG brings together practitioners, researchers, and organizations from across the global FIRST community to collaborate on cybersecurity measurement for the benefit of the broader cybersecurity community.
Deliverables
The Metrics SIG develops resources for measuring and improving cybersecurity operations, including:
- Metrics catalogs and frameworks
- Methodologies and implementation guidance
- Publications and educational materials
- Community presentations and workshops
Together, these deliverables enable organizations to establish and mature effective cybersecurity measurement programs.
The Metrics SIG publishes its work for the benefit of the broader cybersecurity community and encourages organizations to adopt, adapt, and build upon these resources.
Membership
The Metrics SIG is open to anyone interested in improving how cybersecurity operations are measured. We welcome practitioners, researchers, managers, educators, students, and anyone interested in advancing the discipline of cybersecurity measurement. We invite you to contribute your experience and expertise through collaboration with the global FIRST community.
Out of Scope
To maintain its community-driven and advisory role, the Metrics SIG does not:
- Certify, accredit, or audit organizations
- Evaluate or assess the performance of individual organizations
- Prescribe mandatory methodologies, metrics, or measurement practices
Chairs
- Matt Palmer, Jersey CSC
- Peter Aarhus, Ørsted
- Raja Jasper, Huntington Bank
Request to Join
