Information security monitoring and measurement analysis and evaluation