李彥民 (Anthony)

SHOPLINE / CISO

Cyber Security and Risk Analyst with over 20 years of experience in financial services, manufacturing, medical technology and e-commerce SaaS platforms. Skilled in conducting both qualitative and quantitative risk assessments to identify security vulnerabilities, ensuring alignment with business objectives and IT processes.

Adopts a comprehensive approach to cybersecurity by aligning people, processes, and technology within an organization’s security ecosystem. Emphasizes building a security-conscious culture through effective communication and training. Expert in designing and optimizing processes to integrate security seamlessly into daily operations, improving both efficiency and resilience. Leverages technology strategically to enhance security measures and align them with business goals. Focused on fostering a collaborative environment where security is an interconnected aspect of the organization’s framework, supporting both growth and performance.

SPEECH
演講議程
4/16 (三) 16:15 - 16:45 7F 701F CISO 論壇
Metrics: Confronting Cybersecurity with data

Peter Drucker’s concept of “what gets measured, gets done” underscores the critical role of measurement in setting priorities and achieving objectives. By deciding what to measure, we define what truly matters, enabling a sharper focus on the actions that drive success. Without clear metrics, it’s impossible to track progress or ensure the job is done right. Metrics provide the structure, clarity, and accountability needed for effective decision-making and meaningful results.

In cybersecurity, the challenge of measurement is even greater. The constantly shifting threat landscape, the intangible nature of digital risks, and rapidly evolving technologies make it especially hard to quantify success or gauge performance. That’s why metrics are so vital—they bring clarity to uncertainty, help assess efforts, prioritize risks, and ultimately enable organizations to meet their goals.