How do you know if your security program is working? What can metrics show or not show? This session will be a dynamic discussion on what to consider when developing and reviewing security metrics for your company.