Measurements are key to the success of a project for data analysis on the measurements to be implemented correctly therefore the MeasureMeasure (*) phase of DMAIC that contains data exploration, collection, and assessment is critical to the success of the Six Sigma project. Measure phase needs to focus on the data only relevant to the scope of the project since otherwise the project would have wasted time itself. There may be data sets collected prior to the Six Sigma project, however the data collected may require further processing for the purpose of the Six Sigma project therefore cleaning and editing the data may be necessary. Understanding the detailed nature of the project’s scope, the relevant business units and entities, and the dynamics of the existing system are extremely for making important data collection decisions as a part of the Measure phase of DMAIC. Given a set of security metrics that can be appropriate for applying as a part of the measurements, a cybersecurity program establishes a common vocabulary with all technology support processes within the organization. It simply links business processes and cybersecurity processes that allow us to view cybersecurity risks as business risks.