a11r - rant machine?

"Developing a Framework for Evaluating Organizational Information Assurance Metrics Programs"
http://oai.dtic.mil/oai/oai?&verb=getRecord&metadataPrefix=html&identifier=ADA467367
http://www.dtic.mil/cgi-bin/GetTRDoc?AD=ADA467367&Location=U2&doc=GetTRDoc.pdf

"Evaluating IT security performance with quantifiable metrics"
http://www.docstoc.com/docs/2495821/Evaluating-IT-security-performance-with-quantifiable-metrics

"Information Assurance - Security in the Information Environment"
http://www.docstoc.com/docs/2511437/Information-Assurance-Security-in-the-Information-Environment

"THE DEVELOPMENT OF METRICS FOR THE INFORMATION TECHNOLOGY DEPARTMENT OF AN INTERNET SERVICE PROVIDER"
http://www.docstoc.com/docs/3944369/THE-DEVELOPMENT-OF-METRICS-FOR-THE-INFORMATION-TECHNOLOGY-

"Guide to Security Metrics"
http://www.docstoc.com/docs/3447506/Guide-to-Security-Metrics-SHIRLEY-C-PAYNE-DIRECTOR-IT-SECURITY
http://www.sans.org/reading_room/whitepapers/auditing/a_guide_to_security_metrics_55?show=55.php&cat=auditing

"Metric for IT-Security of an Organization"
http://www7.informatik.uni-erlangen.de/~dressler/theses/inc/weiss2005metric-abstract.shtml

"Information Security Management Maturity Model v2.3"
http://www.lulu.com/content/paperback-buch/information-security-management-maturity-model-v23/6441763

http://www.metricscenter.org/index.php/resourcesmain/articles

"Economic Security Metrics"
http://www.inf.tu-dresden.de/~rb21/publications/BN2008_Economic_Security_Metrics.pdf
http://www.springerlink.com/content/q2n7104416173q4m
(Literaturliste!)