BEGIN:VCALENDAR
VERSION:2.0
PRODID:-//pretalx//pretalx.com//PQAJX7
BEGIN:VTIMEZONE
TZID:EET
BEGIN:STANDARD
DTSTART:20000101T000000
RRULE:FREQ=YEARLY;BYMONTH=1;UNTIL=20001231T220000Z
TZNAME:EET
TZOFFSETFROM:+0200
TZOFFSETTO:+0200
END:STANDARD
BEGIN:STANDARD
DTSTART:20021027T050000
RRULE:FREQ=YEARLY;BYDAY=-1SU;BYMONTH=10
TZNAME:EET
TZOFFSETFROM:+0300
TZOFFSETTO:+0200
END:STANDARD
BEGIN:DAYLIGHT
DTSTART:20020331T040000
RRULE:FREQ=YEARLY;BYDAY=-1SU;BYMONTH=3
TZNAME:EEST
TZOFFSETFROM:+0200
TZOFFSETTO:+0300
END:DAYLIGHT
END:VTIMEZONE
BEGIN:VEVENT
UID:pretalx-bsides-tallinn-2025-PQAJX7@pretalx.com
DTSTART;TZID=EET:20250925T100000
DTEND;TZID=EET:20250925T104500
DESCRIPTION:Security teams love metrics. Beautiful dashboards\, filled with
  vulnerability counts\, alert volumes\, SLA compliance for fix times\, tra
 ining hours logged\, etc. However\, do any of these metrics actually make 
 organizations more secure? The uncomfortable truth is that most security m
 etrics are questionable\, at least from a scientific perspective.\n\nIn th
 is talk\, I will focus on the science behind meaningful security metrics. 
 I will introduce a framework that helps define metrics based on organizati
 on-specific goals\, as opposed to creating purpose around whatever metrics
  we have lying around. From there\, I will break down what are the key qua
 lities of a good metric. Finally\, I will briefly present the different da
 ta analysis methods and the common validity threats when going from metric
  values back to supporting your goals.\n\n"If you can't measure it\, you c
 an't improve it". However\, if your security strategy is built on question
 able metrics\, you might not be improving the right things. This talk will
  challenge industry assumptions and provide scientific backing to the fact
  that many widely used security metrics in the industry might be vanity nu
 mbers.
DTSTAMP:20251016T114456Z
LOCATION:Stage 1
SUMMARY:Your Security Dashboard is Lying to You: The Science of Metrics - A
 ram H
URL:https://pretalx.com/bsides-tallinn-2025/talk/PQAJX7/
END:VEVENT
END:VCALENDAR