Abstract: As information security lost continues to rise, public and private organizations contend that metrics initiatives will become critical to managing and understanding the impact of information security programs. Information security metrics theory was intro

Key words: Information security, Risk management, Security metrics, Evaluation indices