Q. I understand the value of measuring my security program and developing metrics to "tell our story," however, I don't know where to start. I have responsibility for physical security. Can you give me an example of a measure/metric I should be developing?
A. Often, the "story" is initially about cost until you have a more mature metrics program that can really dive into value. If you have been transitioning from manned posts to electronic access control, show how this program has enabled reductions in headcount or contract services. Identify several colleagues in other companies and do some benchmarking around cost per post to see how you stand and what steps you might take to better manage cost. Measuring the quality of response to incidents is an early measure of value to consider.
Answer provided by George Campbell, Security Executive Council Emeritus Facuty.