Using metrics provides a quantifiable way to measure the effectiveness of security programs and processes. As the popularity of metrics has increased over the past few years so has the number and type of metrics that are used to evaluate efficiencies. However, without proper vetting, metrics may not effectively evaluate the process or program that is being measured.

When’s the last time you reviewed the services that your security integrator is offering? If it’s been more than a year, or perhaps even a few months, I’m certain that you’ll find that there are more choices and greater flexibility in the deployment of those choices.

Performance metrics are “critically important” to business leaders, says Greg Niehaus, Professor of Finance and Insurance for the Moore School of Business, University of South Carolina. “In my view it’s very important for business functions to have metrics that tie back to the objectives of the organization – that measure the impact on value and value creation.” If a function fails to develop and effectively communicate performance metrics, says Niehaus, “their contributions to the organization will likely be not appreciated, which, in down times, could lead to cutting of responsibilities or jobs and hurting the value of the organization.”

Each year, Security magazine honors top security executives who positively impact the security industry, their organization, their colleagues and their peers. They change the security landscape for the better.