I am blogging everyday (or nearly everyday) on The Daily Drucker: 366 Days of Insight and Motivation for Getting the Right Things Done.

The action point is a question on if the performance yardsticks are appropriate to you objectives. This is something we’ll be tackling this year. For security it’s risk. How do you measure that? We use a variety of tools. Some of them have risk scores others do not and it will be up to us to determine what we see as risk score. Then there’s weighting because one tools risk score may be higher or lower than another. This is something security hasn’t had a great answer.