We’re passionate about the power and value delivered by metrics programs. While the heavy lifting is building your metrics program, evaluating metric actual and target values is required to improve decisions on the level of control effectiveness needed for your organization.
Third Defense consultants work with your security team and control owners to evaluate appropriate metric target levels, metric gaps, and metrics not providing value. The result is a set of measurements and decisions that communicate the existing and target performance across your control environment.
The Analyze Processes engagement takes advantage of the service catalog to assess the maturity of each process across people, process, and maturity. We leverage a maturity model similar to the capability maturity model for consistency. The benefits are a visual representation to set expectations on process maturity and drive investment decisions.
Third Defense consultants interview key personnel to determine the level of maturity for key processes. We’ll also identify evidence to justify and help communicate the selected level. As needed, we’ll train your management team to self-assess process maturity. The benefit of evaluating process maturity on a semi-annual basis is to communicate the level of actual vs. expected progress. Maturity advancement sets expectations and is a useful tool for spending and hiring decisions.
IT security organizations of all sizes and industries implement software and hardware to manage risk and enable the business. Over time, tools age, become redundant, outdated, or are simply not deployed to their full capability. A periodic tools inventory and utilization assessment is beneficial to identify spending gaps, and more importantly, identify cost savings.
Third Defense consultants will interview key personnel to inventory all security related tools and applications. Working with your team, we’ll evaluate tools across a number of categories e.g. utilization, redundancy, available alternatives, upgrades, cost, and renewal. The result is a visual representation of optimal utilization and opportunities for cost savings or improvement.
Customized tool utilization spreadsheet.