practitionerThreat Modeling
Define questions before choosing metrics
Said by Aram Hovsepyan ·
“Then once we have these goals, the next level is formulating questions to measure progress towards that goal, to measure, to see how well we are doing in terms of a specific goal and to measure the progress towards that goal. And only then we pick metrics to answer these questions in a quantitative way.”
Transcript evidence from Aram Hovsepyan -- Your Security Dashboard is Lying to You: The Science of Metrics.