This is Part 2 in our six-part series on creating a strategy map for security leaders. The first row of our strategy map is about the question that security professionals seem to struggle with the most: What value do you provide? This confusion of activity with results is why many security professionals mistakenly try to associate metrics initiatives with value that they are providing to the organization. For many risks, the unrewarded risks have been rewarded with making decisions and creating value that all and all risks have to be dealt with.”]