Metrics are incredibly useful and a critical input for making risk decisions, but finding the right metrics and interpreting them is often a scary proposition for many security groups. We’ll share strategies for choosing metrics as well as how to use tools such as visualization to make those metrics and associated risk decisions easier, more informative and most importantly more useful.