Effective metrics are a key tool for success in InfoSec, but bad metrics can be the bane of your existence. We’ll talk about what makes for a useable metric, we will demonstrate how to build metrics using GQM that are effective regardless of the target audience, show best practices in scorecard development and metrics communication, and show a blueprint for developing an effective metrics program.