
The push to secure organizational information has brought about the need to develop better metrics for understanding the state of the organization's security capability. This thesis utilizes case studies of information security metrics programs within Department of Defense...