Verizon Enterprise Risk and Incident Sharing Metrics Framework
As you may know, Verizon Business publishes the Data Breach Investigations Report (DBIR), which presents aggregated case statistics collected by the Investigative Response (IR) team. What you may not know is that the reports are based upon a set of metrics developed internally for the purpose of capturing key details surrounding a breach. A version of these metrics are now publicly available as the Verizon Enterprise Risk and Incident Sharing (VERIS) framework. This document provides a brief overview of VERIS and how your organization can make use of it to better organize, track, and responsibly share incident data.