chapter 1, Introduction -- chapter 2 The Whats and Whys of Metrics -- chapter 3 Measuring Compliance with Security and Privacy Regulations and Standards -- chapter 4 Measuring Resilience of Physical, Personnel, IT, and Operational Security Controls -- chapter 5 Measuring Return on Investment (ROI) in Physical, Personnel, IT, and Operational Security Controls.