# The CARE Framework The CARE Framework by Gartner can be used to help organizations assess their cybersecurity programs through measurement. CARE stands for Consistency, Adequacy, Reasonableness, and Effectiveness. The metrics devised in this framework are established to help an organization assess the credibility and defendability of its cybersecurity program. Organizations using this model are encouraged to establish a catalog of 20 to 30 metrics which reflect the progress and effectiveness of the cybersecurity program. ## Inspiration & Resources + [4 Metrics That Prove Your Cybersecurity Program Works (gartner.com)](https://www.gartner.com/en/articles/4-metrics-that-prove-your-cybersecurity-program-works) ## [Cyber City Map](https://cybercitymap.com/) © 2023-2024 by [ThirdScore, Inc.](https://thirdscore.com/) All Rights Reserved.