Infosec Metrics: Measuring and Presenting Security Effectiveness to Leadership

Explore effective infosec metrics and their presentation to leadership in this 35-minute LASCON conference talk. Learn how to measure security capabilities, team performance, and program health at scale. Discover Twilio's approach to creating automated, near-real-time metrics that highlight risks, security gaps, and engineering achievements across business units. Gain insights into motivations, challenges, and practical implementation strategies. Access open-sourced templates and code for generating metrics automatically. Cover topics including the importance of metrics, context, the Office of the CISO, missing features, automation requirements, and future developments.

Intro
Agenda
Why metrics
Metrics
Context
Office of the CISO
Missing features
Automating metrics
Requirements
Demo
Publicizing
Whats next