Cybersecurity signals : connecting controls and incident outcomes

<?xml version="1.0" encoding="UTF-8"?><modsCollection xmlns="http://www.loc.gov/mods/v3" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.loc.gov/mods/v3 http://www.loc.gov/standards/mods/v3/mods-3-8.xsd">
<mods version="3.8">
<titleInfo>
<title>Cybersecurity signals</title>
<subTitle>: connecting controls and incident outcomes</subTitle>
</titleInfo>
<name type="corporate" xmlns:xlink="http://www.w3.org/1999/xlink" xlink:href="MAPA20080449025">
<namePart>Marsh & McLennan Companies</namePart>
<nameIdentifier>MAPA20080449025</nameIdentifier>
</name>
<typeOfResource>text</typeOfResource>
<originInfo>
<place>
<placeTerm type="code" authority="marccountry">usa</placeTerm>
</place>
<issuance>monographic</issuance>
<place>
<placeTerm type="text">New York</placeTerm>
</place>
<publisher>Marsh McLennan</publisher>
<dateIssued>2025</dateIssued>
</originInfo>
<language>
<languageTerm type="code" authority="iso639-2b">eng</languageTerm>
</language>
<physicalDescription>
<form authority="marcform">print</form>
<extent>17 p.</extent>
</physicalDescription>
<abstract displayLabel="Summary">There is no shortage of controls to implement in cybersecurity. But which ones should be prioritized? Cybersecurity leaders need objective, evidence-driven metrics to help them inform and justify cybersecurity investments. In this study, we address the question of what cybersecurity measures make the biggest impact on risk, and further the conversation about control evaluation within the cybersecurity community</abstract>
<tableOfContents displayLabel="Contents">Looking back: 2023 top controls -- 2025 top controls -- Control deep dives -- Conclusion</tableOfContents>
<note type="statement of responsibility">The Cyber Risk Intelligence Center (CRIC)</note>
<subject xmlns:xlink="http://www.w3.org/1999/xlink" xlink:href="MAPA20140022700">
<topic>Ciberseguridad</topic>
</subject>
<subject xmlns:xlink="http://www.w3.org/1999/xlink" xlink:href="MAPA20080588953">
<topic>Análisis de riesgos</topic>
</subject>
<subject xmlns:xlink="http://www.w3.org/1999/xlink" xlink:href="MAPA20080543556">
<topic>Control</topic>
</subject>
<subject xmlns:xlink="http://www.w3.org/1999/xlink" xlink:href="MAPA20080601522">
<topic>Evaluación de riesgos</topic>
</subject>
<subject xmlns:xlink="http://www.w3.org/1999/xlink" xlink:href="MAPA20080571009">
<topic>Vulnerabilidad</topic>
</subject>
<subject xmlns:xlink="http://www.w3.org/1999/xlink" xlink:href="MAPA20210011863">
<topic>Resultados</topic>
</subject>
<classification authority="">861</classification>
<recordInfo>
<recordContentSource authority="marcorg">MAP</recordContentSource>
<recordCreationDate encoding="marc">250902</recordCreationDate>
<recordChangeDate encoding="iso8601">20250903093143.0</recordChangeDate>
<recordIdentifier source="MAP">MAP20250012318</recordIdentifier>
<languageOfCataloging>
<languageTerm type="code" authority="iso639-2b">spa</languageTerm>
</languageOfCataloging>
</recordInfo>
</mods>
</modsCollection>