Security Governance.
Organizational Information Security Budget as Percentage of IT Budget Information Security Budget Spend Breakdown Percentage of Users With Security Exceptions Percentage of Staff Fully Trained on Infosec Awareness Compliance Percentages (PCI/SOX/HIPAA/etc.) Employee Behavior Metrics (hunting