The motive for this research has been the famous quote of Lord Kelvin “You can not improve what you can not measure”. Today’s information era has given new interpretations to this, expressing the need to measure abstract concepts such as Information Security. There are multiple sources, ranging from academic research to industrial reports, such as (Danahy, 2004), (Fisher, 2009) and (Sonnenreich et al., 2006) that share the same view and highlight the importance of measuring security within the context of Information Technologies.