Implementing security metrics is no walk in the park. In this session, we will dive into the Multivac Product Security Metrics Framework. We will explore the intricacies of extracting, correlating, and storing metrics from a multitude of security tools and how we crafted a service with a low learning curve and highly scalability for fellow security engineers. We will also showcase the power of data visualization, how dashboards tell compelling stories, and how security metrics became a key asset in burning down risk and handling 0-day threats.

In this presentation, I will take you through my personal journey of understanding – from having minimal knowledge about security metrics to becoming a catalyst for change within my organization, aiming to inspire and empower others to embark on their own adventure in the complex realm of security metrics. Join me on this exciting journey, and together, we'll navigate the labyrinth of security metrics and see how you can achieve excellence in your security endeavors.