Measurement the effectiveness of panda cloud office protection (PCOP) in Jaring Communications Sdn Bhd using iso based security metric

Information is an important asset to an organization especially electronic information where it is easily exposed to attacks such as malicious software (software designed to illegally access a computer system without owners' authorization), computer hacking and denial of service attack. Therefore the security of the information shall be taken into consideration in order to keep preservation of confidentially, integrity and availabifoy of information. The Information Security Management System (ISMS) is designed to ensure the adequate and proportionate security controls for an organization that protects information assets and give confidence to interested parties or customer. One of the security controls that JARfNG has implemented is Protection against Malicious and Mobile Code, so with that, the organization decided to have an endpoint security software called Panda Cloud Office Protection (PCOP) installed; to keep their information safe from malware attack. However, one of the ISMS requirements is to assess the control that the organization has implemented; in this case, to measure the effectiveness of PCOP. Since the Organization have not establish a suitable method for measurement, therefore, this study helped to design a security metric based on ISO/IEC 27004:2009, which is used to measure the effectiveness of PCOP. The research instrument used in this study is the security metrics which containing of metric or unit of measurement. The study used PivotTable as a tool to analyze the data. The measuring process involves all computers and workstations under JARfNG. Indicator interpretation from measurement result indicated that PCOP managed to protect from the malwares attack effectively, and this result showed that PCOP is the right endpoint security software for the organization. This study contributes a security metric which ISEQ-G (a department that manages in terms of information security) and EIS (a department that manages enterprise system) team can benefit from.