Risk-based metrics are considered worthless unless all relevant factors are true.SecOps metrics measure day-to-day operational health of technology stack and employee practices.Tracking strategic security initiatives and projects helps illustrate the organization's journey.SLT (Senior Leadership Team) often focuses more on the company's security and potential vulnerabilities.