With an increasing need for information security in IT the need for measuring is present to display the improvement and development of your information security over time. No best practice has been accepted in the area. ...