Decision-makers need reliable data in order to understand risk and determine value of investments. With the amount of data available in a multinational company, one would assume that answers would be easy to find. But how does one identify which data is reliable and make it meaningful? This talk will provide best practices and lessons learned on how ADP built an effective security metrics program.Learning Objectives:1: Understand use cases in which metrics can be applied to business-driven security.2: Gain a structured approach to leveraging data for security decision-making.3: Learn through practical lessons how to communicate results of your metrics program.