It’s not good enough to maintain a quiet, reliable security service until something goes wrong. And metrics can provide the hard numbers and context on the performance of the security function, proving that nothing happening was the direct result of an effective security management program.