MITRE, in collaboration with government, industry, and academic stakeholders, is improving the measurability of security throughregistriesof baseline security data, providing standardizedlanguagesas means for accurately communicating the information, defining properusage, and helping establish community approaches for standardizedprocesses.

The other activities and initiatives listed here have similar concepts or compatible approaches to MITRE’s. Together all of these efforts — be they mature or continuing to build momentum — are helping to make security more measurable by defining the concepts that need to be measured, providing for high fidelity communications about the measurements, and providing for sharing of the measurements and the definitions of what to measure.