If you cannot Measure it, you cannot Secure it: A Case Study on Metrics for Informed Choice of Security Controls

Published in Journal of Information Security and Applications, 2025

This case study explores metrics that help practitioners make informed choices about security controls.