A major problem faced by many organizations is not taking information security seriously by the the top management. Unlike the rest of the functions of a business, Information or Cyber Security does not directly contribute to the top or bottom line of a business.

However, they are vitally important in protecting your business from the threats that can not only affect your top or bottom line but also damage the brand image and reputation your business has built over the years.

Its possible to measure the impact your security program has on your business using the right metrics, but then celebrating based on wrong metrics can be more damaging than no metrics at all.