How to use metrics for better information security

Following onto my piece discussing the concept of relative metrics in SecurityWeek last week, my piece in The Business Journals entitled "How to use metrics for better information security" was published today.  In this piece, I continue my series in The Business Journals geared towards small and medium-sized businesses (SMBs).  Have a look at this piece if the topic of metrics interests you: http://www.bizjournals.com/bizjournals/how-to/technology/2014/11/how-to-use-metrics-for-better-information-security.html.