From the course: Static Application Security Testing

Unlock the full course today

Join today to access over 24,400 courses taught by industry experts.

Code review metrics

Code review metrics - SonarQube Tutorial

From the course: Static Application Security Testing

Start my 1-month free trial Buy for my team

Code review metrics

“

- [Narrator] I mentioned earlier in this course that you can't effectively manage your application security efforts without the right measurements. This is where metrics come into play. In order to determine the right metrics for your program, you need to start by identifying your audience. Executives are expected to make strategic decisions about their area of the business and to ensure that the business is both healthy and growing under their leadership. If you're sharing application security testing minutia with your execs, then I hate to break it to you, but you might be doing it wrong. Executives want to know if the value from your application security testing activities exceeds the cost of that activity. If you're getting your money's worth, great. If not, then you need to reconsider your approach. Metrics around cost and value will really resonate with executives. Execs also want to know if you need them to make…

Contents