How do security pros typically make the case for more, better or stronger security? How do they convince senior management that we need more resources than last year? Answer: Numbers – big numbers! There are good reasons for using security metrics and big numbers. But is this the most effective strategy? There is no doubt that good measurements are essential in technology, security and all areas of business. We need to measure progress with good numbers, but add a story or two to make the situation real to the audience.”]