Quantitive management of information security in organizations

Different methodology implementation to define quantitive management of information security in organizations including defining information risks quantitive approach using Lenstra and Voss [1] suggestion, annual loss expectancies like model to meet the expectations of the real world applications like cost management, finance management etc. We made some improvements on approach using ISO/IEC 27005:2011 framework. It was chosen because of a global standard and included in ISO 31000:2009, also my real life experiences deal with ISO/IEC 27001 implementation and certification.