Security leaders must master analytics skills to compete in a data-defined world. We will cover research from How to Measure Anything in Cybersecurity Risk (Wiley 2016). Our thesis is that we compete with the “bad guys” on analytics. Security talent and technology are parameters to a larger, more strategic, decision making model.