The security organization plays a critical role in identifying, measuring, preventing and responding to a growing inventory of risks. Metrics are central to understanding the adequacy of security controls and where to focus our limited resources for the greatest contribution to the protection strategy. The successful security executive defines his business plan and the performance of resources and services around clearly articulated measures. Those measures should be aligned with core business strategy and priorities. Effective use of metrics that matter to business leadership, demonstrating the value of security operations, wins a security executive important capital.”]
Source: https://www.csoonline.com/article/2120344/how-to-use-metrics.html