Conducting metric assessments can help you get the tools you need to fortify your security system. Having the numbers can give you a new insight into security flaws you might not have identified, and will give you measurable data to present to your management to make your case for changes or for funding.
Metrics can cover: