Measure

For the term which is synonymous to "countermeasure", "safeguard" or "control", please refer to entry Control.

Definitions

Standard Definition

ISO standards

Variable to which a value is assigned as the result of measurement . The term “measures” is used to refer collectively to base measures, derived measures, and indicators . Measurement refers to a process to determine a value .

In the context of information security the process of determining a value requires information about the effectiveness of an information security management system and its associated controls using a measurement method, a measurement function, an analytical model, and decision criteria.

• Measurement function is algorithm or calculation performed to combine two or more base measures .
• Measurement method is logical sequence of operations, described generically, used in quantifying an attribute with respect to a specified scale . The type of measurement method depends on the nature of the operations used to quantify an attribute. Two types can be distinguished:

• subjective: quantification involving human judgment;
• objective: quantification based on numerical rules.

• Measurement results are one or more indicators and their associated interpretations that address an information need.
• Decision criteria refer to thresholds, targets, or patterns used to determine the need for action or further investigation, or to describe the level of confidence in a given result .
• Analytical model is algorithm or calculation combining one or more base measures and/or derived measures with associated decision criteria.

See also

• Control