CISM, W. Krag (Enterprise Security Architect, Thousand Oaks, California, USA) Brotby 
Information Security Management Metrics [PDF ebook] 
A Definitive Guide to Effective Security Monitoring and Measurement

Spectacular security failures continue to dominate the headlines despite huge increases in security budgets and ever-more draconian regulations. The 20/20 hindsight of audits is no longer an effective solution to security weaknesses, and the necessity for real-time strategic metrics has never been more critical. Information Security Management Metr