For over 50 years, the advantages in cyberspace have favored attackers, not defenders. Until the publication of the “U.S. National Cybersecurity Strategy” in 2023, it was never a goal to shift that advantage. Cyber defense gaining advantages over attacks needs to be measured; however, metrics remain at the level of individual controls or enterprises. This webinar advances a framework of indicators to track if defense is winning across three main areas:
- Threat: To track if defenders are disrupting threat actors, at scale
- Vulnerability: To measure if defenders are reducing their own risks
- Impact: To track whether the financial and national-security costs are rising or falling