Problem
You are a security analyst responsible for antivirus management in your company. Your manager needs to make a presentation to company executives on the efficacy of the security program. For the presentation, your manager requires you to send detailed metrics on the effectiveness of antivirus management. Your report will need to include technical details as well as terminology explained in layman's terms.
Your company has three layers of antivirus protection-inbound e-mail is scanned for viruses and spam at the Internet perimeter, e-mail is scanned again on the mail servers, and finally, e-mail is scanned by the desktop antivirus client. List one good antivirus metric for each layer.
a) Describe how you would gather the results and the format you would use to present them to the company executives, in understandable terms that provide sufficient detail.
b) Explain why you chose the metrics and how they satisfactorily explain the security team's effectiveness in antivirus management.