The long wait is over: PRAGMATIC Security Metrics has been published by Auerbach/CRC Press.
With the ink still drying, the wholesalers and distributors are busy stocking up the retailers as we speak.
Those of you who had the foresight to pre-order it can expect your delivery soon. If you haven't, you can order it online now from Amazon/Book Depository, CRC Press, Foyles, Booktopia, !ndigo, Bokus, Red Pepper, Powell’s, QBD and elsewhere.
If you would rather thumb through the book before parting with the readies, ask your local bookstore or library to stock it.
Alternatively, persuade management to get the book in for your corporate university, library or bookshelf ... or simply buy it yourself and reclaim the expenses, or put the charge down to experience and self-training!
As to the business case for buying the book, can you afford not to improve your security metrics? If you struggle to justify the sixty-odd dollars it will take to revolutionize your understanding of the measurement and management of information security, metrics may be the least of your worries!