Introduction to identity management risk metrics

Good metrics aggregate both objective and quantitative measures, and should be consistent, cheap to gather, and expressed as numbers. Objective measurement helps you report on past progress, forecast future scenarios, and respond to real-time events. In this paper, the author presents some identity management risk metrics that highlight the distribution, quality, affiliation, and governance of identity in a system as well as inform the decision-making process