espm

The Enterprise Security Profile Model (ESPM) is:

1. The vertical mapping of security controls
2. The operational level measurements of control implementations
3. The risk-based metrics aggregated into an executive perspective
4. The prioritized management of the results for allocating resources in response to the risk