Aram Hovsepyan

In this episode, Aram Hovsepyan, an OWASP core team member and entrepreneur known for his work on security metrics, unravels the fallacies behind conventional security metrics like vulnerability counts and CVSS scores. He introduces the Goal Question Metric framework, urging organizations to create dashboards that genuinely reflect security readiness. Aram discusses critical metrics that matter, including the often-overlooked mean time to resolution, and emphasizes the need for precise, reliable data to enhance overall security posture.